A valid Article 9 condition: Because fingerprints used to identify people are special-category data, what must
Processing identifying biometrics requires a valid Article 9 condition in addition to an ordinary lawful basis.
The question
A hospital wants to use fingerprint biometrics to control staff access to a controlled-drug store. Because fingerprints used to identify people are special-category data, what must generally be in place before the hospital may process them under GDPR?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Nothing beyond a standard privacy notice, because access-control fingerprints are treated simply as ordinary personal data.Plausible but wrong: identifying biometrics are special-category data, not ordinary personal data.
- A patent license from the biometric vendor, because fingerprint algorithms are protected as intellectual-property assets.Wrong: IP licensing is unrelated to the lawful processing of biometric data.
- A valid Article 9 condition, such as explicit consent or another listed exception, on top of an ordinary lawful basis. ✓Correct: special-category processing needs an Article 9 condition in addition to an Article 6 lawful basis.
- A cross-border transfer agreement, because all biometric processing is deemed to take place outside the hospital's country.Wrong: local biometric processing does not inherently involve a cross-border transfer.
The trap
Treating identifying biometrics as ordinary personal data needing only a notice or standard lawful basis. How to remember it
Processing identifying biometrics requires a valid Article 9 condition in addition to an ordinary lawful basis.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Conducting a data protection impact assessment: Under GDPR, which obligation is most directly triggered before →
- Copyright can restrict copying protected works: From an intellectual-property standpoint, which is the most →
- They apply to AI-driven hiring: From a nondiscrimination-law standpoint, which statement most accurately →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.
