Document an applicable lawful basis for the training: Which direct control is still missing?
Public accessibility is not a blanket exemption; the agency must still establish an applicable GDPR lawful basis for training.
The question
Under the EU GDPR, a public-benefit agency wants to train an eligibility model on publicly accessible personal data. Assume transparency, minimization, security, purpose analysis, rights handling, and any DPIA requirements are satisfied. Which direct control is still missing?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Obtain consent from every person represented in the dataset.Consent is one possible lawful basis, but the GDPR does not require consent whenever personal data are publicly accessible.
- Document an applicable lawful basis for the training processing. ✓Even with other prerequisites satisfied, the agency must identify and document a lawful basis under GDPR Articles 5 and 6.
- Treat public accessibility as permission for model training.Public availability does not remove the GDPR requirement for a lawful basis and other applicable processing conditions.
- Remove all direct identifiers before using the data.Pseudonymization or identifier removal may reduce risk, but it does not itself establish a lawful basis or guarantee anonymization.
The trap
Do not equate public availability, pseudonymization, or consent with the complete lawful-basis analysis. How to remember it
Public accessibility is not a blanket exemption; the agency must still establish an applicable GDPR lawful basis for training.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Verify the retention exception and process the rights: What should it do first? →
- Assess compatibility between the original and proposed: What missing control is most direct? →
- Document the applicable non-consent lawful basis: Which missing control addresses consent versus other lawful →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.