Analyze actual purposes and means: Which control is most | AIGP
7-day money-back guarantee — full refund within 7 days of purchase if you've completed under 20% of the questions. See pricing →
Certifications Tools Flashcards Career Paths Exam Guides Blog Pricing For Teams About

Language

✓ EnglishDeutschEspañolFrançaisPortuguês
Check readiness — free →

Analyze actual purposes and means: Which control is most direct?

AIGP Understanding How to Govern AI Deployment and Use Hard

Under the GDPR, actual purposes and means determine roles; a processor label cannot resolve independent vendor purposes.

The question

For an employment-screening deployment in the European Union, assume the GDPR applies. The vendor contract labels the vendor a processor, yet the vendor proposes reusing applicant data to improve its own model. All other deployment prerequisites are satisfied. Which control is most direct?

Preparing for AIGP? Take the free 5-min readiness quiz →

  1. Rely on the contract’s processor label.
    A contractual label does not settle roles when the vendor may determine purposes for its own data reuse activities.
  2. Add a data-reuse restriction while leaving role allocation unchanged.
    A restriction may reduce reuse, but leaving roles unchanged fails to resolve whether the vendor independently determines purposes.
  3. Obtain the vendor’s privacy certification and retain existing terms.
    Certification may provide limited evidence, but cannot determine controller or processor roles created by the parties’ actual activities.
  4. Analyze actual purposes and means, then align GDPR arrangements accordingly. ✓
    GDPR roles depend on actual decision-making; the organization should assess each activity and document suitable arrangements for those roles.
The trap
Examine who determines purposes and means for each activity, rather than accepting supplier marketing or contract labels.

How to remember it

Under the GDPR, actual purposes and means determine roles; a processor label cannot resolve independent vendor purposes.

How many of these would you get right?

One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.

Test your AIGP readiness — free

More Understanding How to Govern AI Deployment and Use questions

Part of the Certsqill AIGP question bank · Understanding How to Govern AI Deployment and Use · Every answer, right and wrong, comes with its own explanation.