The GDPR is just a regulation and is not a law. True or False?
100 points

The GDPR exemption that is Legitimate Interests is not safe to rely on, as the OSINT practitioner cannot demonstrate any real legitimate Interest to process the PII of a Subject. True or False?
100 points

Your employer is vetting candidates for an executive position in your organisation. The short list is 3 people. If your HR department was to ask you if legally there is a way to 'check them out from online info'. You would reply with
100 points

To process personal data of a subject without their consent, the practitioner might rely on a lawful basis that is:
100 points

An OSINT practitioner needs a Lawful Basis for the authority to
100 points

You have been asked by your HR department to 'check out the social media' of a prospective employee. The GDPR Exemption you will rely on for lawful processing of their PII, is:
100 points

The PII of a subject that is good to have in the instruction, at the start of an investigation is ...?]
100 points