Which of the following is NOT one of the main GDPR obligations imposed on an investment intermediary?

• A. Process personal data fairly.
• B. Keep personal data up to date.
• C. Collect personal data only for one or more specified purposes.
• D. Communicate with customers using plain intelligible language.

Answer: (D)

The crucial concept here is the core processing principles GDPR imposes on how an investment intermediary handles personal data. The essentials are that data must be processed fairly and lawfully, kept accurate and up to date, and collected only for specified, explicit purposes. These reflect the main duties around how data is handled day to day.

Communicating with customers in plain, intelligible language relates to transparency—making information about processing clear to individuals. While GDPR requires information to be provided in clear language, this transparency requirement is not one of the primary processing duties like fairness, accuracy, or purpose limitation. It’s an important compliance area, but it’s not grouped with the main processing obligations in the same way as A, B, and C. That’s why this option is the correct choice.