Assess purpose compatibility and lawful basis before: What should procurement require first?
Before reuse, assess compatibility with the original purpose and identify a lawful basis for the proposed processing.
The question
Under the GDPR in the EEA, a software vendor proposes reusing customer-support records to train a scheduling model. The original records supported support services, and the vendor has not shown compatibility or a new lawful basis. What should procurement require first?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Obtain consent from every customer before reviewing compatibility.Consent may be considered in some circumstances, but it does not replace the required assessment of compatibility and lawful basis.
- Assess purpose compatibility and lawful basis before approving reuse. ✓Reuse requires examining whether the new scheduling purpose is compatible with collection and whether a lawful basis supports the processing.
- Approve reuse because the vendor originally received the records lawfully.An original lawful collection does not automatically authorize a materially different purpose; compatibility and lawful basis must be assessed again.
- Require stronger encryption while leaving the purpose unchanged.Encryption may improve security, but it does not answer whether training the scheduling model is purpose-compatible or lawfully based.
The trap
Separate the legality of initial collection from the legality and compatibility of secondary processing. How to remember it
Before reuse, assess compatibility with the original purpose and identify a lawful basis for the proposed processing.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Treat public availability as access evidence: Which interpretation best fits these observations? →
- Use the applicable legal-obligation basis: Which conclusion is most supportable? →
- Collect only age band and region: Which action best applies minimization? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.