Under Article 21 of the GDPR, a Controller Must Stop

question 11

Multiple Choice

Under Article 21 of the GDPR, a controller must stop profiling when requested by a data subject, unless it can demonstrate compelling legitimate grounds that override the interests of the individual. In the Guidelines on Automated individual decision-making and Profiling, the WP 29 says the controller needs to do all of the following to demonstrate that it has such legitimate grounds EXCEPT?

• A) Carry out an exercise that weighs the interests of the controller and the basis for the data subject's objection.
• B) Consider the impact of the profiling on the data subject's interest, rights and freedoms.
• C) Demonstrate that the profiling is for the purposes of direct marketing.
• D) Consider the importance of the profiling to their particular objective.

---

Definitions:

Applicants

Individuals who apply for a job, program, or opportunity.

Admission

The process or fact of entering or being allowed to enter a place, organization, institution, or field of study.

Wait-Listed

The status of individuals who are placed on a waiting list for an opportunity, often used in the context of college admissions or organ transplants.

Political Science

The examination of political systems, governmental structures, public policies, and the behavior and processes associated with politics.