Classify the provider as controller for its own analytics: Which role best describes that separate activity?
Roles follow actual purposes and means: independent analytics make the provider a controller for that separate processing.
The question
Under the GDPR in the EEA, a logistics provider receives delivery data for scheduling. It also decides to combine those data with its own datasets to develop analytics products. Which role best describes that separate activity?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Classify the provider as neither role because analytics are internal.Internal use remains processing, and an organization determining its own purposes can have controller responsibilities under the GDPR.
- Classify the provider as processor for every activity.A provider is a processor only when acting on another party’s instructions; its independent analytics purpose indicates controller responsibilities.
- Classify the provider as controller for its own analytics purpose. ✓Determining an independent purpose and means makes the provider responsible as controller for that separate processing activity.
- Classify the provider as joint controller automatically.Joint controllership requires shared determination of purposes or means, which the facts do not establish for the provider’s own analytics.
The trap
Map purposes and means for each activity; do not assign one role to an entire vendor relationship. How to remember it
Roles follow actual purposes and means: independent analytics make the provider a controller for that separate processing.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Treat it as personal data because reidentification remains: How should the dataset be treated for the agency’s →
- Require an Article 28 processor arrangement: What procurement decision best addresses the evidence? →
- Complete a GDPR DPIA before processing: What must happen before processing begins? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.