Certified Information Privacy Professional – Europe (CIPP/E) — Question 194

As per the GDPR, which legal basis would be the most appropriate for an online shop that wishes to process personal data for the purpose of fraud prevention?

Answer options

• A. Protection of the interests of the data subjects.
• B. Performance of a contact
• C. Legitimate interest
• D. Consent

Correct answer: C

Explanation

The correct answer is C, Legitimate interest, as it allows businesses to process personal data for essential purposes like fraud prevention without requiring explicit consent. Options A and B do not specifically apply to fraud prevention, and D, Consent, is not the most suitable option when there is a legitimate interest to protect against fraud.