Isaca CDPSE Exam - Topic 7 Question 71 Discussion

Actual exam question for Isaca's CDPSE exam

Question #: 71
Topic #: 7

A mortgage lender has created an online application that collects borrower information and delivers a mortgage decision automatically based on criteria set by the lender. Which fundamental data subject right does this process infringe upon?

ARight to restriction of processing

BRight to be informed

CRight not to be profiled

DRight to object

Show Suggested Answer

Suggested Answer: C

The right not to be profiled is the right of data subjects to not be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects on them. The online application that delivers a mortgage decision automatically based on criteria set by the lender is an example of such a decision, as it affects the data subject's ability to obtain a loan.

What exactly is 'profiling' under the GDPR - DMA

Can I be subject to automated individual decision-making, including profiling - European Commission

by Kasandra at Nov 25, 2025, 03:09 PM

Limited Time Offer

25%

Off

Get Premium CDPSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Micaela

3 months ago

All good points, but I feel D) Right to object is crucial too. Users should have a say.

upvoted 0 times

...

Sarina

3 months ago

I lean towards A) Right to restriction of processing. It limits choices.

upvoted 0 times

...

Rene

3 months ago

True, but profiling is a bigger issue. People should have control over their data.

upvoted 0 times

...

Leonor

4 months ago

But isn't it also B) Right to be informed? They should know how their data is used.

upvoted 0 times

...

Shantell

4 months ago

Isn't it a bit surprising that lenders can automate decisions like this?

upvoted 0 times

...

Nada

4 months ago

Right to be informed is also a concern here!

upvoted 0 times

...

Carmen

5 months ago

Wait, are we sure it violates that right? Seems a bit gray.

upvoted 0 times

...

Kristeen

5 months ago

I agree, profiling without consent is a big issue.

upvoted 0 times

...

Edelmira

5 months ago

This definitely infringes on the right not to be profiled.

upvoted 0 times

...

Lenny

5 months ago

I'm going with C. Gotta protect those borrowers from the robot overlords!

upvoted 0 times

...

Fabiola

5 months ago

Wow, this is like a Black Mirror episode come to life. The right not to be profiled is definitely the way to go.

upvoted 0 times

...

Roxane

5 months ago

Option C is the correct answer. Automated decision-making based on profiling is a big no-no.

upvoted 0 times

...

Daren

6 months ago

I’m leaning towards the right to restriction of processing, but I’m not confident. It’s tricky when it comes to automated systems.

upvoted 0 times

...

Devorah

6 months ago

This seems similar to a practice question we did on automated decision-making. I feel like the right to object could be relevant too.

upvoted 0 times

...

Wilda

6 months ago

I'm not entirely sure, but I remember something about the right to be informed being important in these contexts.

upvoted 0 times

...

Samira

6 months ago

I think this might relate to the right not to be profiled since the decision is made automatically based on the data collected.

upvoted 0 times

...

Jovita

6 months ago

I feel pretty confident about this one. The automated decision-making in the mortgage application is likely infringing on the borrower's right to not be subject to solely automated decision-making, which is part of the right to not be profiled.

upvoted 0 times

...

Portia

6 months ago

Okay, I've got this. The key is understanding how the automated mortgage decision process impacts the borrower's rights. I think the right to not be profiled is the one that's most relevant here.

upvoted 0 times

...

Hester

7 months ago

I agree, Alice. Automated decisions feel unfair.

upvoted 0 times

...

Stevie

7 months ago

I think it's C) Right not to be profiled.

upvoted 0 times

...

Corrie

7 months ago

I think the right to be informed is the most relevant here. The borrowers should know how their data is being used.

upvoted 0 times

...

Jennifer

7 months ago

This is a tricky question, but I think the right to not be profiled is the best answer. The automated decision-making process seems to be using the borrower's information in a way that could be considered profiling, which infringes on that data subject right.

upvoted 0 times

...

Dominic

7 months ago

Haha, the robot lender is trying to pull a fast one. C is the only way to stop the AI takeover.

upvoted 0 times

...

Fanny

8 months ago

Hmm, I'm a bit confused. I know there are a lot of data subject rights, but I'm not sure which one specifically applies here. I'll have to review my notes.

upvoted 0 times

...

Orville

8 months ago

This seems like a tricky one. I'll need to think carefully about the different data subject rights and how they apply to this mortgage application process.

upvoted 0 times