Certified Information Privacy Professional – Europe (CIPP/E) — Question 164

Under Article 9 of the GDPR, which of the following categories of data is NOT expressly prohibited from data processing?

Answer options

• A. Personal data revealing ethnic origin.
• B. Personal data revealing genetic information.
• C. Personal data revealing financial information.
• D. Personal data revealing trade union membership.

Correct answer: C

Explanation

Option C is correct because financial information does not fall under the special categories of sensitive data that the GDPR aims to protect. In contrast, options A, B, and D pertain to data that is explicitly classified as sensitive and thus subject to stricter processing regulations.