PDP9 practice question 9 of 10

Under which circumstances can the 'domestic purposes' exemption be used to justify non- compliance with the Data Protection Act 2018? A) An…

Full set: 40 questions
Under which circumstances can the 'domestic purposes' exemption be used to justify non- compliance with the Data Protection Act 2018? A) An individual sells make up products for commission and uses social media to promote products to friends and family B) A couple are planning their daughter's wedding and use excel to store contact details and dietary needs of the guests C) An individual employs a babysitter and stores her bank details in an encrypted document in order to make payments D) A pansh council keeps a spreadsheet to manage bookings of the village hall, it contains only contact information and time slots E) A group of students are arranging a house party and using social media to invite people that they do and do not know
Answer options
A: A, B, C, and E.
B:
C: C. D, and E Correct answer
D: B, and C
E:
F: B.C. and D
Correct Answer:
C. C. D, and E
Explanation

The 'domestic purposes' exemption, established under Article 2(2)(c) of the UK GDPR and reflected in the Data Protection Act 2018, applies only when a natural person processes data in the course of a "purely personal or household activity." Planning a family wedding (B) and managing the employment of a babysitter for one's own household (C) are quintessential examples of such activities. The processing is confined to a private, domestic sphere. The exemption does not cover commercial activities, processing by public authorities, or activities that make personal data publicly available to an indefinite number of people, as these fall outside the scope of a 'purely' personal or household context.

Why Incorrect

A) This is a commercial activity conducted for financial gain (commission), which is explicitly excluded from the domestic purposes exemption.
D) A parish council is a public authority, not a natural person acting in a private capacity, so the exemption cannot apply.
E) Using social media to invite unknown individuals makes the processing public, falling outside the 'purely personal' scope, as established in relevant case law.

References

1. UK General Data Protection Regulation (UK GDPR), Article 2(2)(c). This article states the regulation does not apply to the processing of personal data "by a natural person in the course of a purely personal or household activity." This is the legal basis for the exemption.

2. Information Commissioner's Office (ICO). (2023). Guide to the UK General Data Protection Regulation (UK GDPR) - Material scope. In the section 'When does the UK GDPR not apply?', the ICO clarifies: "This exemption does not apply if the processing is for professional or commercial purposes... The Court of Justice of the European Union has ruled that this exemption should be interpreted narrowly and that it only covers activities carried out in the course of an individual’s personal or family life." This supports the exclusion of options A, D, and E.

3. Court of Justice of the European Union. (2003). Judgment of the Court of 6 November 2003, Case C-101/01, Bodil Lindqvist. Paragraphs 47-48 of this ruling state that "the activity of publishing personal data on the internet so that it is accessible to an indefinite number of people" does not constitute a 'purely personal or household activity'. This directly invalidates scenario E.

4. University of Cambridge, Faculty of Law. (2021). LLM Paper 38: Law and Information - Lecture 4: The Scope of Data Protection Law. Course materials discuss the household exemption and the Lindqvist case, noting that the exemption is narrowly construed and does not apply to online publication accessible by the public, reinforcing the reasoning for excluding option E.

Scroll to Top