A DPIA addressing necessity: What must the bank complete before processing begins?
A likely high-risk processing operation requires a GDPR DPIA assessing necessity, proportionality, risks, and safeguards before processing.
The question
Under the GDPR in the European Union, a bank plans large-scale AI extraction of identity and income information from financial documents, creating a likely high risk to applicants’ rights and freedoms. What must the bank complete before processing begins?
Preparing for AIGP? Take the free 5-min readiness quiz →
- A general AI inventory without documenting privacy risks.An inventory may support governance but does not replace the GDPR DPIA required for likely high-risk personal-data processing.
- Consent from every applicant regardless of the bank’s lawful basis.Consent is not automatically required, and it would not replace a DPIA where processing is likely to create high risk.
- Vendor encryption evidence without assessing processing necessity.Encryption is a safeguard, but the threshold requires broader assessment of necessity, proportionality, risks, and safeguards.
- A DPIA addressing necessity, proportionality, risks, and safeguards. ✓GDPR Article 35 requires a DPIA before processing likely to create high risk, including assessment of necessity, proportionality, risks, and safeguards.
The trap
High risk to rights and freedoms triggers the DPIA analysis before processing, not merely after deployment. How to remember it
A likely high-risk processing operation requires a GDPR DPIA assessing necessity, proportionality, risks, and safeguards before processing.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- An Article 28 processor agreement: Which contract feature is decisive? →
- Seek prior consultation with the competent supervisory: What is the required next governance step before →
- An informed reviewer evaluates reasons: Which review arrangement is meaningful? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.