Certified Information Privacy Professional – Europe (CIPP/E) — Question 45

A grade school is planning to use facial recognition to track student attendance. Which of the following may provide a lawful basis for this processing?

Answer options

• A. The school places a notice near each camera.
• B. The school gets explicit consent from the students.
• C. Processing is necessary for the legitimate interests pursed by the school.
• D. A state law requires facial recognition to verify attendance.

Correct answer: D

Explanation

Option D is correct because a state law providing a requirement for facial recognition establishes a clear legal basis for the processing. Options A and B rely on notice and consent, which may not satisfy legal requirements for biometric data usage, while Option C does not provide a sufficient legal justification without a specific law backing the processing.