Certified Information Privacy Professional – Europe (CIPP/E) — Question 26

In which situation would a data controller most likely be able to justify the processing of the data of a child without parental consent?

Answer options

• A. When the data is to be processed for market research.
• B. When providing preventive or counselling services to the child.
• C. When providing the child with materials purely for educational use.
• D. When a legitimate business interest makes obtaining consent impractical.

Correct answer: B

Explanation

The correct answer is B because providing preventive or counseling services directly addresses the child's welfare, which can be justified without parental consent. Options A and C do not prioritize the child's immediate needs, and D, while suggesting a business rationale, does not specifically relate to the child's best interests.