Verify Article 28 terms for instructions: Which evidence should be verified before approval?
Verify specific GDPR processor terms, rather than relying on privacy notices, model metrics, or general promises.
The question
An employer in the EU, subject to the GDPR, plans to use a vendor’s AI for employment screening. The vendor will process applicant data only on the employer’s documented instructions. Which evidence should be verified before approval?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Verify Article 28 terms for instructions, security, assistance, subprocessors, and deletion ✓These are core subjects for an appropriate GDPR processor arrangement where the vendor acts on the employer’s instructions.
- Inspect model accuracy and validation reports for screeningPerformance evidence does not establish documented instructions, security, assistance, subprocessors, or deletion terms.
- Approve the purchase order after confirming broad privacy-law compliance languageA general compliance promise may not specify or allocate the operational processor obligations needed under GDPR Article 28.
- Review the vendor’s public privacy noticeA public notice describes the vendor’s information practices but does not establish the required processor relationship or operational terms.
The trap
For processor questions, look for concrete Article 28 terms rather than certifications, performance metrics, or generic promises. How to remember it
Verify specific GDPR processor terms, rather than relying on privacy notices, model metrics, or general promises.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Document each party’s purposes and means: What evidence should resolve the parties’ roles? →
- Document purposes: Which evidence should resolve the approval uncertainty? →
- Escalate for Article 36 prior consultation: What should resolve this uncertainty before deployment? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.