Certified Information Privacy Professional – Europe (CIPP/E) — Question 226

The EDPB's Guidelines 8/2020 on the Targeting of Social Media Users stipulates that in order to rely on legitimate interest as a legal basis to process personal data, three tests must be passed. Which of the following is NOT one of the three tests?

Answer options

• A. Purpose test.
• B. Necessity test.
• C. Balancing test.
• D. Adequacy test.

Correct answer: D

Explanation

The correct answer is D, as the Adequacy test is not one of the three required tests outlined in the guidelines. The Purpose test, Necessity test, and Balancing test are crucial for determining whether legitimate interest can be used as the basis for data processing.