MENU
Article 9 of the GDPR lists exceptions to the general prohibition against processing biometric dat
a. Which of the following is NOT one of these exceptions?
Suggested Answer: B
Get Premium CIPP/E Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
37 comments · newest first
DY
Dyan
12 months ago
I thought consent was always required, so D is surprising!
OL
Ollie
1 year ago
B and C are legit exceptions, though.
LE
Leslie
1 year ago
Wait, so a non-profit can just disclose biometric data? That sounds sketchy.
MA
Marla
1 year ago
I agree, A seems off.
HE
Herman
1 year ago
A is definitely NOT an exception.
DE
Della
1 year ago
I remember that consent is a big deal in GDPR, so D seems like a valid exception. I think A is the one that doesn't belong here.
AU
Audry
1 year ago
I feel like the non-profit organization aspect in A is tricky. It seems like it could be an exception, but I can't recall if it actually is.
HE
Heidy
1 year ago
I practiced a similar question about GDPR exceptions last week. I think B is definitely one of the exceptions, but I’m not confident about A either.
LE
Leonor
1 year ago
I remember discussing the exceptions in class, but I'm not entirely sure which one doesn't fit. I think A sounds off, but I could be wrong.
RA
Raylene
1 year ago
Hmm, this seems straightforward. I'll need to carefully review the options and make sure I select the 3 most relevant actions.
RA
Raymon
1 year ago
I'm pretty confident this is the Union of the Cube and Sphere, option B. The shape looks like it encompasses both the Cube and Sphere together.
TU
Tula
1 year ago
I think stopping and starting the instance makes more sense, but I'm not entirely sure if that's necessary in all cases.
LA
Lavonna
1 year ago
I'm unsure but I feel like the webvpn section could work too. Weren't we told something about webvpn and user access?
CO
Cornell
1 year ago
Ah, the GDPR - the gift that keeps on giving when it comes to tricky exam questions. *shakes head*
FE
Felicidad
1 year ago
Wait, the GDPR has exceptions for biometric data processing? I thought it was supposed to be ironclad! *chuckles*
BE
Bernadine
1 year ago
D) The processing is explicitly consented to by the data subject and he or she is allowed by Union or Member State law to lift the prohibition.
AL
Alyce
1 year ago
C) The processing is necessary for the establishment, exercise or defense of legal claims when courts are acting in a judicial capacity.
KI
Kirk
1 year ago
B) The processing is necessary to protect the vital interests of the data subject when he or she is incapable of giving consent.
HE
Herminia
1 year ago
A) The processing is done by a non-profit organization and the results are disclosed outside the organization.
LO
Loren
1 year ago
D has to be the correct answer. If the data subject explicitly consents and the law allows it, then the processing is permitted.
ED
Edda
1 year ago
C) The processing is necessary for the establishment, exercise or defense of legal claims when courts are acting in a judicial capacity.
BU
Bulah
1 year ago
B) The processing is necessary to protect the vital interests of the data subject when he or she is incapable of giving consent.
BU
Buddy
1 year ago
A) The processing is done by a non-profit organization and the results are disclosed outside the organization.
WI
Wilda
2 years ago
I'm going with C. Processing for legal claims seems like a reasonable exception to the biometric data prohibition.
CH
Chana
1 year ago
User1: True, but I still think C is the most reasonable exception.
CO
Cory
1 year ago
User2: I think D is also a valid exception, if the data subject consents.
GL
Glory
1 year ago
User1: I agree, processing for legal claims makes sense.
LA
Laquanda
1 year ago
I'm not sure about option A, processing by a non-profit organization seems a bit questionable.
ST
Stefania
1 year ago
I think option D is also a valid exception, if the data subject consents.
LA
Latonia
1 year ago
I agree, processing for legal claims makes sense as an exception.
MI
Mila
2 years ago
B is the obvious choice here. The GDPR allows processing biometric data to protect the vital interests of an incapable data subject.
KR
Krissy
2 years ago
I see your point, but I still think it's A because non-profit organizations are exempt from the prohibition.
LE
Leonard
2 years ago
No, I believe the correct answer is D.
CA
Carolynn
2 years ago
Option A doesn't seem right. The GDPR has strict requirements for non-profit organizations processing biometric data, even if it's disclosed outside the organization.
BR
Brent
1 year ago
B) The processing is necessary to protect the vital interests of the data subject when he or she is incapable of giving consent.
EV
Eve
2 years ago
A) The processing is done by a non-profit organization and the results are disclosed outside the organization.
KR
Krissy
2 years ago
I think the answer is A.