Certified Information Privacy Professional – Europe (CIPP/E) — Question 27

According to the GDPR, when should the processing of photographs be considered processing of special categories of personal data?

Answer options

• A. When processed with the intent to publish information regarding a natural person on publicly accessible media.
• B. When processed with the intent to proceed to scientific or historical research projects.
• C. When processed with the intent to uniquely identify or authenticate a natural person.
• D. When processed with the intent to comply with a law.

Correct answer: C

Explanation

The correct answer, C, is accurate because processing photographs for the purpose of uniquely identifying or authenticating an individual involves sensitive personal data, which is classified under special categories by GDPR. The other options relate to different contexts of data processing that do not meet the criteria for special categories of personal data under GDPR.