<< Prev Question Next Question >>

Question 12/62

SCENARIO
Please use the following to answer the next question:
Brady is a computer programmer based in New Zealand who has been running his own business for two years.
Brady's business provides a low-cost suite of services to customers throughout the European Economic Area (EEA). The services are targeted towards new and aspiring small business owners. Brady's company, called Brady Box, provides web page design services, a Social Networking Service (SNS) and consulting services that help people manage their own online stores.
Unfortunately, Brady has been receiving some complaints. A customer named Anna recently uploaded her plans for a new product onto Brady Box's chat area, which is open to public viewing. Although she realized her mistake two weeks later and removed the document, Anna is holding Brady Box responsible for not noticing the error through regular monitoring of the website. Brady believes he should not be held liable.
Another customer, Felipe, was alarmed to discover that his personal information was transferred to a third- party contractor called Hermes Designs and worries that sensitive information regarding his business plans may be misused. Brady does not believe he violated European privacy rules. He provides a privacy notice to all of his customers explicitly stating that personal data may be transferred to specific third parties in fulfillment of a requested service. Felipe says he read the privacy notice but that it was long and complicated Brady continues to insist that Felipe has no need to be concerned, as he can personally vouch for the integrity of Hermes Designs. In fact, Hermes Designs has taken the initiative to create sample customized banner advertisements for customers like Felipe. Brady is happy to provide a link to the example banner ads, now posted on the Hermes Designs webpage. Hermes Designs plans on following up with direct marketing to these customers.
Brady was surprised when another customer, Serge, expressed his dismay that a quotation by him is being used within a graphic collage on Brady Box's home webpage. The quotation is attributed to Serge by first and last name. Brady, however, was not worried about any sort of litigation. He wrote back to Serge to let him know that he found the quotation within Brady Box's Social Networking Service (SNS), as Serge himself had posted the quotation. In his response, Brady did offer to remove the quotation as a courtesy.
Despite some customer complaints, Brady's business is flourishing. He even supplements his income through online behavioral advertising (OBA) via a third-party ad network with whom he has set clearly defined roles.
Brady is pleased that, although some customers are not explicitly aware of the OBA, the advertisements contain useful products and services.
Under the General Data Protection Regulation (GDPR), what is the most likely reason Serge may have grounds to object to the use of his quotation?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (62q)
Question 1: Article 5(1)(b) of the GDPR states that personal data must b...
Question 2: In which scenario is a Controller most likely required to un...
Question 3: SCENARIO Please use the following to answer the next QUESTIO...
Question 4: SCENARIO WebTracker Limited is a cloud-based online marketin...
Question 5: SCENARIO Please use the following to answer the next questio...
Question 6: A key component of the OECD Guidelines is the "Individual Pa...
Question 7: Why is advisable to avoid consent as a legal basis for an em...
Question 8: According to the GDPR, how is pseudonymous personal data def...
Question 9: Which GDPR requirement will present the most significant cha...
Question 10: What practice does the USA FREEDOM Act NOT authorize?...
Question 11: An employee of company ABCD has just noticed a memory stick ...
Question 12: SCENARIO Please use the following to answer the next questio...
Question 13: Which of the following would NOT be relevant when determinin...
Question 14: What is true if an employee makes an access request to his e...
Question 15: SCENARIO Please use the following to answer the next questio...
Question 16: Which of the following describes a mandatory requirement for...
1 commentQuestion 17: Which of the following would MOST likely trigger the extrate...
Question 18: Under what circumstances would the GDPR apply to personal da...
Question 19: In addition to the European Commission, who can adopt standa...
Question 20: SCENARIO Please use the following to answer the next questio...
Question 21: If a company is planning to use closed-circuit television (C...
Question 22: A company is located in a country NOT considered by the Euro...
Question 23: Which of the following would most likely NOT be covered by t...
Question 24: SCENARIO Please use the following to answer the next questio...
Question 25: According to the GDPR, what is the main task of a Data Prote...
Question 26: What is the key difference between the European Council and ...
Question 27: How does the GDPR now define "processing"?...
Question 28: Tanya is the Data Protection Officer for Curtains Inc., a GD...
Question 29: Which entities must comply with the Telemarketing Sales Rule...
Question 30: Under the GDPR, where personal data is not obtained directly...
Question 31: What was the aim of the European Data Protection Directive 9...
Question 32: Which of the following countries will continue to enjoy adeq...
Question 33: An online company's privacy practices vary due to the fact t...
Question 34: When collecting personal data in a European Union (EU) membe...
Question 35: SCENARIO Please use the following to answer the next QUESTIO...
Question 36: SCENARIO Looking back at your first two years as the Directo...
Question 37: SCENARIO Please use the following to answer the next questio...
Question 38: Which is TRUE about the scope and authority of data protecti...
Question 39: Which area of privacy is a lead supervisory authority's (LSA...
Question 40: What obligation does a data controller or processor have aft...
Question 41: What is the consequence if a processor makes an independent ...
Question 42: Article 29 Working Party has emphasized that the GDPR forbid...
Question 43: SCENARIO Please use the following to answer the next questio...
Question 44: In which case would a controller who has undertaken a DPIA m...
Question 45: An organization is establishing a mission statement for its ...
Question 46: Which sentence best describes proper compliance for an inter...
Question 47: SCENARIO Please use the following to answer the next questio...
Question 48: SCENARIO WebTracker Limited is a cloud-based online marketin...
Question 49: Under Article 9 of the GDPR, which of the following categori...
Question 50: In the event of a data breach, which type of information are...
Question 51: A worker in a European Union (EU) member state has ceased hi...
Question 52: SCENARIO Please use the following to answer the next questio...
Question 53: Under Article 58 of the GDPR, which of the following describ...
Question 54: Under the GDPR, which essential pieces of information must b...
Question 55: An organisation receives a request multiple times from a dat...
Question 56: If a multi-national company wanted to conduct background che...
Question 57: Please use the following to answer the next question: Wonder...
Question 58: WP29's "Guidelines on Personal data breach notification unde...
Question 59: When may a financial institution share consumer information ...
Question 60: Which EU institution is vested with the competence to propos...
Question 61: SCENARIO Please use the following to answer the next questio...
Question 62: Which jurisdiction must courts have in order to hear a parti...