Free Authentic IAPP AIGP Actual Exam Questions - Question 13 Discussion
automated decision-making, controllers are required to provide data subjects specific information
on?
It’s A, since the law highlights clarity on decisions, not officer contacts or full data specifics.
Option A looks right because the GDPR stresses informing people about automated decisions and their effects, not the full dataset or impact assessments. B feels too detailed about inferences, which isn't strictly required.
A, because GDPR focuses on explaining the decision process, not every data detail.
A. The GDPR’s transparency rules emphasize telling people about automated decisions and how they might affect them, not necessarily all data details or impact assessments. So A fits best here.
It’s definitely not C or D since those focus more on compliance details rather than direct transparency to data subjects. Between A and B, B seems too specific about inferences, which isn’t explicitly required. The GDPR mainly insists on informing people about automated decision-making itself and its logic and consequences, which fits A better. So, I’m with A here.
I think the answer is A. The GDPR stresses transparency about automated decision-making, so controllers must inform individuals about the existence of such processing, how the logic works, and its potential impact. Options B, C, and D seem less central to the transparency principle here.