Document each party’s purposes and means: What evidence should resolve the parties’ roles?
Actual purposes and means control role analysis; independent vendor training use cannot be resolved by the processor label.
The question
An EU housing-software buyer subject to the GDPR hires a screening provider. The contract calls the provider a processor, but the provider also uses applicant records to train its own commercial scoring service. What evidence should resolve the parties’ roles?
Preparing for AIGP? Take the free 5-min readiness quiz →
- A statement that the buyer selected the model’s intended outputsBuyer influence over outputs does not eliminate the provider’s independent purpose in commercial model training.
- Document each party’s purposes and means, including independent model-training use ✓Controller or processor status follows actual purposes and means; independent commercial training may create controller responsibilities.
- The provider’s security architecture and access-control documentationSecurity evidence may support safeguards but does not determine who decides purposes and means of processing.
- The contract’s processor label and supplier privacy noticeLabels and notices do not settle roles when the provider determines an independent purpose for using applicant data.
The trap
Identify every purpose, especially a supplier’s independent reuse, before deciding whether processing is merely on behalf of the buyer. How to remember it
Actual purposes and means control role analysis; independent vendor training use cannot be resolved by the processor label.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Run a realistic reidentification test: What evidence should resolve whether the data are anonymized? →
- Verify Article 28 terms for instructions: Which evidence should be verified before approval? →
- Document purposes: Which evidence should resolve the approval uncertainty? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.