IAPP CIPP-E Question Answer
Start-up company MagicAl is developing an AI system that will be part of a medical device that detects skin cancer. To take measures against potential bias in its AI system, the IT team decides to collect data about users’ ethnic origin, nationality, and gender.
Which would be the most appropriate legal basis for this processing under GDPR, Article 9 (Processing of special categories of personal data)?