Document the identification purpose and Article 9 basis: Which evidence should resolve approval?
Resolve the actual unique-identification purpose, biometric processing facts, and applicable Article 9 exception.
The question
Under the GDPR, an energy company wants facial imagery from maintenance sites to identify authorized technicians. The vendor calls the service “image analytics,” but the identification purpose and applicable Article 9 condition are undocumented. Which evidence should resolve approval?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Limit cameras to daylight maintenance periodsOperating hours may reduce collection, but they do not establish whether the processing uniquely identifies people or satisfy an Article 9 exception.
- Set retention limits and restrict access to site managersRetention and access controls are useful safeguards but do not resolve the biometric classification or special-category condition.
- Accept the supplier’s image-analytics classification after recording its rationaleThe supplier’s label does not determine GDPR classification; the organization must assess the actual purpose and processing context.
- Document the identification purpose and Article 9 basis ✓The company must establish the actual unique-identification purpose, whether biometric data are processed, and which Article 9 exception, if any, applies.
The trap
Classify biometric processing by actual purpose and context, then examine the applicable special-category exception. How to remember it
Resolve the actual unique-identification purpose, biometric processing facts, and applicable Article 9 exception.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Reviewers can examine reasons: Which evidence best shows that review is meaningful rather than a rubber stamp? →
- Document the Chapter V mechanism and destination-risk: Which evidence is most decisive? →
- Map copies, define retention, and test the erasure-request: Which evidence should resolve approval of the →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.