Certified Information Privacy Professional – Europe (CIPP/E) — Question 134

Which of the following would NOT be relevant when determining if a processing activity would be considered profiling?

Answer options

• A. If the processing is to be performed by a third-party vendor
• B. If the processing involves data that is considered personal data
• C. If the processing of the data is done through automated means
• D. If the processing is used to predict the behavior of data subjects

Correct answer: A

Explanation

Option A is correct because the involvement of a third-party vendor does not determine whether the activity is profiling; what matters is how the data is processed. Options B, C, and D are all relevant to profiling, as they directly relate to the nature of the data and the methods used in processing.