Article 9 of the GDPR lists exceptions to the general prohibition against processing biometric data.
Which of the following is NOT one of these exceptions?
A . The processing is done by a non-profit organization and the results are disclosed outside the organization.
B . The processing is necessary to protect the vital interests of the data subject when he or she is incapable of giving consent.
C . The processing is necessary for the establishment, exercise or defense of legal claims when courts are acting in a judicial capacity.
D . The processing is explicitly consented to by the data subject and he or she is allowed by Union or Member State law to lift the prohibition.
Answer: A
Explanation:
Reference: https://dataprivacymanager.net/sensitive-personal-data-special-category-under-the-gdpr/
Leave a Reply