Assess compatibility between the original and proposed: What missing control is most direct?
Before reuse, the company must assess compatibility between dispatch collection and route-planning training purposes under GDPR purpose limitation.
The question
Under the EU GDPR, a logistics company wants to reuse driver-location records collected for real-time dispatch to train a long-term route-planning model. Assume lawful basis, security, minimization, and rights controls are satisfied. What missing control is most direct?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Assess compatibility between the original and proposed purposes. ✓Purpose limitation requires assessing whether long-term model training is compatible with the original dispatch purpose before reuse.
- Replace the dispatch vendor with an internal analytics team.Changing the operational team does not establish compatibility between the original collection purpose and new model-training purpose.
- Collect additional location records from a different driver group.A broader dataset may improve utility, but it does not resolve whether reusing the original records is purpose-compatible.
- Encrypt the historical location records again before training.Encryption supports security but does not determine whether the proposed reuse is compatible with the original purpose.
The trap
When reuse is proposed, identify the original purpose and test compatibility before selecting technical or organizational controls. How to remember it
Before reuse, the company must assess compatibility between dispatch collection and route-planning training purposes under GDPR purpose limitation.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Document an applicable lawful basis for the training: Which direct control is still missing? →
- Document the applicable non-consent lawful basis: Which missing control addresses consent versus other lawful →
- Define only necessary fields: Before collection, which missing control most directly implements data →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.
