Treat public availability as access evidence: Which interpretation best fits these observations?
Public availability does not itself establish a GDPR lawful basis; assess lawful basis, purpose, fairness, minimization, and transparency.
The question
Under the GDPR in the EEA, an internal employee-assistance team finds employee information on a public website. Which interpretation best fits these observations?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Public access permits unrestricted internal use.Public accessibility does not remove GDPR duties, including lawful basis, fairness, purpose limitation, minimization, and transparency requirements.
- Rely on employee consent because assistance services involve employees.Consent can be a lawful basis, but its suitability must be assessed; employee status alone does not require or guarantee consent.
- Use the data after encrypting the downloaded files.Encryption supports security but does not establish a lawful basis, compatible purpose, or compliance with minimization and transparency duties.
- Treat public availability as access evidence, not a lawful basis. ✓Public availability describes how data were obtained; the organization still needs a lawful basis and must satisfy other GDPR principles.
The trap
When data are public, ask what lawful basis and purpose govern the new processing. How to remember it
Public availability does not itself establish a GDPR lawful basis; assess lawful basis, purpose, fairness, minimization, and transparency.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Define retention limits and a coordinated workflow: Which missing control most directly addresses both gaps? →
- Assess purpose compatibility and lawful basis before: What should procurement require first? →
- Use the applicable legal-obligation basis: Which conclusion is most supportable? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.