OneTrust Certified Privacy Professional Practice Exam

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the OneTrust Certified Privacy Professional Exam with detailed questions and explanations. Utilize flashcards and comprehensive MCQs to ensure you're ready to excel in your certification journey.

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


Which of the following is NOT a legal basis for processing personal data under GDPR Article 6?

  1. Legal Obligation

  2. Contractual Necessity

  3. Public Relation Efforts

  4. Legitimate Interests

The correct answer is: Public Relation Efforts

The correct response identifies "Public Relation Efforts" as not being a legal basis for processing personal data under GDPR Article 6. The GDPR provides specific legal bases for data processing, which include the necessity for a contract, compliance with a legal obligation, the protection of vital interests, consent from the data subject, performance of a task carried out in the public interest or in the exercise of official authority, and legitimate interests pursued by the data processor or a third party. Public relation efforts do not fit into any of the legal bases outlined in Article 6; they are typically associated with promoting a company or organization rather than fulfilling a necessity based on legal obligations, contracts, or other recognized grounds for processing personal data. Therefore, processing personal data solely for public relations purposes cannot be justified under GDPR without a specific legal basis.