GDPR GDPR Lawful Bases for Processing

Question 1

How many lawful bases for processing personal data are defined under Article 6 of the GDPR?

Accepted Answer

6

Answer

Article 6 of the GDPR establishes exactly six lawful bases: consent, contract, legal obligation, vital interests, public task, and legitimate interests.

Question 2

Which lawful basis applies when processing is necessary to fulfill a legal obligation to which the controller is subject?

Accepted Answer

Legal obligation

Answer

Article 6(1)(c) covers processing necessary for compliance with a legal obligation to which the controller is subject.

Question 3

Under GDPR, which lawful basis applies when processing is necessary to protect the vital interests of the data subject or another natural person?

Accepted Answer

Vital interests

Answer

Article 6(1)(d) covers vital interests and is typically invoked in life-or-death situations where processing is needed to protect someone's life.

Question 4

Which of the following conditions must be met for consent to be a valid lawful basis under GDPR?

Accepted Answer

Consent must be freely given, specific, informed, and unambiguous

Answer

Article 4(11) defines consent as any freely given, specific, informed, and unambiguous indication of the data subject's wishes.

Question 5

A retailer processes customer data solely to fulfill an online purchase order. Which lawful basis under Article 6 applies?

Accepted Answer

Contract

Answer

Article 6(1)(b) covers processing necessary for the performance of a contract to which the data subject is party.

(GDPR) Certified General Data Protection Regulation Specialist Practice Test

(GDPR) Certified General Data Protection Regulation Specialist Practice Test

GDPR GDPR Lawful Bases for Processing