PDP9 practice question 2 of 10
Which of the below would be the BEST example of processing that could utilise the Public Interest Task lawful basis?
Full set: 40 questionsThe collection of council tax is a statutory duty performed by a local authority. This processing is necessary for the performance of a task carried out in the public interest and in the exercise of official authority vested in the controller (the local authority). This aligns directly with the definition of the 'Public Interest Task' lawful basis under GDPR Article 6(1)(e). This is a core, non-commercial function of a public body mandated by law, making it the clearest and most appropriate example among the choices.
A. Processing staff training records is more appropriately covered under the 'Contract' lawful basis, as it is necessary for the employment contract.
B. While the underlying task is public, the processing is by a third-party debt collector, making it a less direct example than a public authority performing its own statutory duty.
D. Placing non-essential website cookies is governed by ePrivacy regulations (like PECR in the UK), which almost always require 'Consent' as the lawful basis.
1. Information Commissioner's Office (ICO). (2024). Guide to the UK General Data Protection Regulation (UK GDPR) - Lawful basis for processing: Public task.
Section: "When can we rely on the public task basis?"
Content: The guidance states, "It covers processing that is necessary for your 'official function' or 'a task in the public interest'. You must have a basis for the task in law... It is most relevant to public authorities, but it can be used by any organisation that exercises official authority or carries out a task in the public interest." The collection of taxes is a quintessential example of an official function based in law.
2. Information Commissioner's Office (ICO). (2024). Guide to the UK General Data Protection Regulation (UK GDPR) - Lawful basis for processing: Contract.
Section: "When is processing 'necessary' for a contract?"
Content: This section clarifies that processing employee data for administrative purposes, such as managing their employment, falls under the 'Contract' basis, supporting why option A is incorrect.
3. Information Commissioner's Office (ICO). (2019). Guidance on the use of cookies and similar technologies.
Page 12, Section: "What is the standard for consent?"
Content: The guidance confirms that for non-essential cookies, "consent must be obtained" and that it must meet the GDPR standard of a "clear affirmative action." This rules out 'Public Interest Task' as a basis for option D.
4. Regulation (EU) 2016/679 (General Data Protection Regulation).
Article 6(1)(e): Defines the lawful basis as: "processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller". This is the legal foundation for the correct answer.
Keep practicing
Take the free PDP9 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other PDP9 practice questions
- Question 1What are Information Society Services'? Select the INCORRECT answer
- Question 3How are data sharing practices governed by data protection law?
- Question 4What does NOT have an exemption prescribed under schedule 3 of the Data Protection Act 20…
- Question 5Two businesses decide to work together to sell their products by mail order Orders are ma…
- Question 6Where a processor engages another processor ("sub-processor") to carry out processing act…
- Question 7Where are the definitions of "Public Authority" and "Public Bodies" found?
