<< Prev Question Next Question >>

Question 38/56

SCENARIO
Please use the following to answer the next QUESTION:
Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for leading the development of the company's flagship product, the Handy Helper. The Handy Helper is an application that can be used in the home to manage family calendars, do online shopping, and schedule doctor appointments. After having had a successful launch in the United States, the Handy Helper is about to be made available for purchase worldwide.
The packaging and user guide for the Handy Helper indicate that it is a "privacy friendly" product suitable for the whole family, including children, but does not provide any further detail or privacy notice. In order to use the application, a family creates a single account, and the primary user has access to all information about the other users. Upon start up, the primary user must check a box consenting to receive marketing emails from Omnipresent Omnimedia and selected marketing partners in order to be able to use the application.
Sanjay, the head of privacy at Omnipresent Omnimedia, was working on an agreement with a European distributor of Handy Helper when he fielded many Questions about the product from the distributor. Sanjay needed to look more closely at the product in order to be able to answer the Questions as he was not involved in the product development process.
In speaking with the product team, he learned that the Handy Helper collected and stored all of a user's sensitive medical information for the medical appointment scheduler. In fact, all of the user's information is stored by Handy Helper for the additional purpose of creating additional products and to analyze usage of the product. This data is all stored in the cloud and is encrypted both during transmission and at rest.
Consistent with the CEO's philosophy that great new product ideas can come from anyone, all Omnipresent Omnimedia employees have access to user data under a program called Eurek a. Omnipresent Omnimedia is hoping that at some point in the future, the data will reveal insights that could be used to create a fully automated application that runs on artificial intelligence, but as of yet, Eureka is not well-defined and is considered a long-term goal.
What element of the Privacy by Design (PbD) framework might the Handy Helper violate?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (56q)
Question 1: In a sample metric template, what does "target" mean?...
Question 2: SCENARIO Please use the following to answer the next QUESTIO...
Question 3: What is most critical when outsourcing data destruction serv...
Question 4: SCENARIO Please use the following to answer the next QUESTIO...
Question 5: SCENARIO Please use the following to answer the next QUESTIO...
Question 6: SCENARIO Please use the following to answer the next QUESTIO...
Question 7: SCENARIO Please use the following to answer the next QUESTIO...
Question 8: The General Data Protection Regulation (GDPR) specifies fine...
Question 9: What should a privacy professional keep in mind when selecti...
Question 10: SCENARIO Please use the following to answer the next QUESTIO...
Question 11: SCENARIO Please use the following to answer the next QUESTIO...
Question 12: An executive for a multinational online retail company in th...
Question 13: SCENARIO Please use the following to answer the next QUESTIO...
Question 14: Which is TRUE about the scope and authority of data protecti...
Question 15: What are you doing if you succumb to "overgeneralization" wh...
Question 16: SCENARIO Please use the following to answer the next QUESTIO...
Question 17: SCENARIO Please use the following to answer the next QUESTIO...
Question 18: SCENARIO Please use the following to answer the next QUESTIO...
Question 19: What does it mean to "rationalize" data protection requireme...
Question 20: SCENARIO Please use the following to answer the next QUESTIO...
Question 21: What is the function of the privacy operational life cycle?...
Question 22: SCENARIO Please use the following to answer the next QUESTIO...
Question 23: Under the General Data Protection Regulation (GDPR), when wo...
Question 24: SCENARIO Please use the following to answer the next QUESTIO...
Question 25: What is a key feature of the privacy metric template adapted...
Question 26: Incipia Corporation just trained the last of its 300 employe...
Question 27: SCENARIO Please use the following to answer the next QUESTIO...
Question 28: SCENARIO Please use the following to answer the next QUESTIO...
Question 29: Under the General Data Protection Regulation (GDPR), which s...
Question 30: In privacy protection, what is a "covered entity"?...
Question 31: If an organization maintains a separate ethics office, to wh...
Question 32: SCENARIO Please use the following to answer the next QUESTIO...
Question 33: SCENARIO Please use the following to answer the next QUESTIO...
Question 34: What is one reason the European Union has enacted more compr...
Question 35: SCENARIO Please use the following to answer the next QUESTIO...
Question 36: Under the General Data Protection Regulation (GDPR), which o...
Question 37: Which of the following is NOT an important factor to conside...
Question 38: SCENARIO Please use the following to answer the next QUESTIO...
Question 39: Which of the following controls does the PCI DSS framework N...
Question 40: When implementing Privacy by Design (PbD), what would NOT be...
Question 41: Which of the following indicates you have developed the righ...
Question 42: In addition to regulatory requirements and business practice...
Question 43: SCENARIO Please use the following to answer the next QUESTIO...
Question 44: SCENARIO Please use the following to answer the next QUESTIO...
Question 45: SCENARIO Please use the following to answer the next QUESTIO...
Question 46: SCENARIO Please use the following to answer the next QUESTIO...
Question 47: SCENARIO Please use the following to answer the next QUESTIO...
Question 48: What is the main function of the Asia-Pacific Economic Coope...
Question 49: There are different forms of monitoring available for organi...
Question 50: SCENARIO Please use the following to answer the next QUESTIO...
Question 51: An organization's privacy officer was just notified by the b...
Question 52: Which of the following privacy frameworks are legally bindin...
Question 53: SCENARIO Please use the following to answer the next QUESTIO...
Question 54: SCENARIO Please use the following to answer the next QUESTIO...
Question 55: Which of the following best supports implementing controls t...
Question 56: SCENARIO Please use the following to answer the next QUESTIO...