Which of the following would most likely NOT be covered by the definition of “personal data” under the GDPR?
Which of the following would most likely NOT be covered by the definition of “personal data” under the GDPR?
Aggregated data that is unlinked and used solely for statistical purposes does not constitute personal data under the GDPR, as it cannot be used to identify an individual. This is in contrast to the payment card number, U.S. social security number, and identification number, all of which are personal identifiers.
the correct answer is C Rectical 162 states: "The statistical purpose implies that the result of processing for statistical purposes is not personal data, but aggregate data, and that this result or the personal data are not used in support of measures or decisions regarding any particular natural person." social security number can still identify a person, thus personal data
C. The unlinked aggregated data used for statistical purposes by an Italian company
C. The unlinked aggregated data used for statistical purposes by an Italian company
C IS THE CORRECT ANSWER
C; social security number is a direct identifying information.
the correct answer is C Rectical 162 states: "The statistical purpose implies that the result of processing for statistical purposes is not personal data, but aggregate data, and that this result or the personal data are not used in support of measures or decisions regarding any particular natural person."