Whether the team can establish lawful basis and purpose | AIGP
7-day money-back guarantee — full refund within 7 days of purchase if you've completed under 20% of the questions. See pricing →
Certifications Tools Flashcards Career Paths Exam Guides Blog Pricing For Teams About

Language

✓ EnglishDeutschEspañolFrançaisPortuguês
Check readiness — free →

Whether the team can establish lawful basis and purpose: What is the decisive issue before reuse?

AIGP Understanding How Laws, Standards and Frameworks Apply to AI Medium

Public availability is not a blanket exemption; lawful basis and compatible purpose remain decisive under the EU GDPR.

The question

In a customer-service operation subject to the EU GDPR, a team wants to train an AI assistant on customer reviews posted publicly online. The reviews contain names and complaints, and the team proposes relying solely on their public availability. What is the decisive issue before reuse?

Preparing for AIGP? Take the free 5-min readiness quiz →

  1. Whether the reviews are accessible without a login
    Open accessibility does not itself establish a GDPR lawful basis, compatible purpose, transparency, or other processing safeguards.
  2. Whether the team can establish lawful basis and purpose compatibility
    GDPR requires a lawful basis and assessment of compatible reuse; public availability alone does not remove those obligations.
  3. Whether the reviews contain enough text for model training
    Training volume concerns utility, not the decisive legal basis and purpose requirements governing personal-data reuse under GDPR.
  4. Whether the vendor contract prohibits publishing the trained assistant’s outputs
    Output publication terms may matter, but they do not establish a lawful basis for processing the source personal data.
The trap
Public source data remains personal data when individuals can be identified; test legal basis and purpose separately.

How to remember it

Public availability is not a blanket exemption; lawful basis and compatible purpose remain decisive under the EU GDPR.

How many of these would you get right?

One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.

Test your AIGP readiness — free

More Understanding How Laws, Standards and Frameworks Apply to AI questions

Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI · Every answer, right and wrong, comes with its own explanation.