In Which of the Following Cases, Cited as an Example

question 151

Multiple Choice

In which of the following cases, cited as an example by a WP29 guidance, would conducting a single data protection impact assessment to address multiple processing operations be allowed?

• A) A medical organization that wants to begin genetic testing to support earlier research for which they have performed a DPIA.
• B) A data controller who plans to use a new technology product that has already undergone a DPIA by the product's provider.
• C) A marketing team that wants to collect mailing addresses of customers for whom they already have email addresses.
• D) A railway operator who plans to evaluate the same video surveillance in all the train stations of his company.

---

Definitions:

Strategy

A plan of action designed to achieve a long-term or overall aim, often used in business, military, and personal contexts to outline a path to desired outcomes.

Marshmallows

A soft, sweet confection made from sugar, water, and gelatin, often used in desserts and as a treat.

Research

The systematic investigation into and study of materials and sources in order to establish facts and reach new conclusions.

Pragmatics

A subfield of linguistics dedicated to studying how language operates in social environments and how people convey and interpret meanings using language.