5.2 Lawful Bases for Processing — Quiz

Which lawful basis requires organisations to carry out a balancing test weighing the organisation's interests against the individual's rights?

A website asks users to 'agree to all cookies' by continuing to browse the site, without providing a 'decline' option. Is this valid consent under the GDPR?

An employer processes employee national insurance numbers to calculate and submit payroll tax. Which lawful basis applies?

You signed up for a newsletter and gave consent for marketing emails. You later change your mind. What dös GDPR Art. 7(3) entitle you to do?

A hospital processes a patient's genetic data to guide their cancer treatment. Which two legal layers must be satisfied under the GDPR?

Explain the difference between 'consent' and 'legitimate interests' as GDPR lawful bases. When might an organisation choose one over the other?