Document the applicable non-consent lawful basis: Which missing control addresses consent versus other lawful
GDPR consent is one lawful basis, not the only one; contractual necessity may support required maintenance scheduling when documented.
The question
Under the EU GDPR, an energy company processes technician contact details to schedule maintenance required by an employment agreement. Assume transparency, minimization, security, and rights controls are satisfied. Which missing control addresses consent versus other lawful bases?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Publish a notice saying consent is implied by employment.Implied consent language does not properly establish a lawful basis where contractual necessity is the relevant justification.
- Document the applicable non-consent lawful basis. ✓Where processing is necessary for contractual performance, the company can document that basis rather than treating consent as universally required.
- Obtain consent before every maintenance scheduling message.Consent is not required when another applicable lawful basis, such as contractual necessity, supports the processing.
- Stop processing until each technician signs a consent form.Suspending necessary scheduling unnecessarily treats consent as the sole route, contrary to GDPR’s multiple lawful bases.
The trap
Ask whether another Article 6 basis fits the stated purpose before selecting consent. How to remember it
GDPR consent is one lawful basis, not the only one; contractual necessity may support required maintenance scheduling when documented.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Assess compatibility between the original and proposed: What missing control is most direct? →
- Define only necessary fields: Before collection, which missing control most directly implements data →
- Treat the coded records as personal data: Which control most directly reflects the correct classification? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.