<< Prev Question Next Question >>

Question 5/62

SCENARIO
Please use the following to answer the next question:
The fitness company Vigotron has recently developed a new app called M-Health, which it wants to market on its website as a free download. Vigotron's marketing manager asks his assistant Emily to create a webpage that describes the app and specifies the terms of use. Emily, who is new at Vigotron, is excited about this task.
At her previous job she took a data protection class, and though the details are a little hazy, she recognizes that Vigotron is going to need to obtain user consent for use of the app in some cases. Emily sketches out the following draft, trying to cover as much as possible before sending it to Vigotron's legal department.
Registration Form
Vigotron's new M-Health app makes it easy for you to monitor a variety of health-related activities, including diet, exercise, and sleep patterns. M-Health relies on your smartphone settings (along with other third-party apps you may already have) to collect data about all of these important lifestyle elements, and provide the information necessary for you to enrich your quality of life. (Please click here to read a full description of the services that M-Health provides.) Vigotron values your privacy. The M-Heaith app allows you to decide which information is stored in it, and which apps can access your data. When your device is locked with a passcode, all of your health and fitness data is encrypted with your passcode. You can back up data stored in the Health app to Vigotron's cloud provider, Stratculous. (Read more about Stratculous here.) Vigotron will never trade, rent or sell personal information gathered from the M-Health app. Furthermore, we will not provide a customer's name, email address or any other information gathered from the app to any third- party without a customer's consent, unless ordered by a court, directed by a subpoena, or to enforce the manufacturer's legal rights or protect its business or property.
We are happy to offer the M-Health app free of charge. If you want to download and use it, we ask that you first complete this registration form. (Please note that use of the M-Health app is restricted to adults aged 16 or older, unless parental consent has been given to minors intending to use it.)
* First name:
* Surname:
* Year of birth:
* Email:
* Physical Address (optional*):
* Health status:
*If you are interested in receiving newsletters about our products and services that we think may be of interest to you, please include your physical address. If you decide later that you do not wish to receive these newsletters, you can unsubscribe by sending an email to [email protected] or send a letter with your request to the address listed at the bottom of this page.
Terms and Conditions
1.Jurisdiction. [...]
2.Applicable law. [...]
3.Limitation of liability. [...]
Consent
By completing this registration form, you attest that you are at least 16 years of age, and that you consent to the processing of your personal data by Vigotron for the purpose of using the M-Health app. Although you are entitled to opt out of any advertising or marketing, you agree that Vigotron may contact you or provide you with any required notices, agreements, or other information concerning the services by email or other electronic means. You also agree that the Company may send automated emails with alerts regarding any problems with the M-Health app that may affect your well being.
What is one potential problem Vigotron's age policy might encounter under the GDPR?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (62q)
Question 1: Article 5(1)(b) of the GDPR states that personal data must b...
Question 2: In which scenario is a Controller most likely required to un...
Question 3: SCENARIO Please use the following to answer the next QUESTIO...
Question 4: SCENARIO WebTracker Limited is a cloud-based online marketin...
Question 5: SCENARIO Please use the following to answer the next questio...
Question 6: A key component of the OECD Guidelines is the "Individual Pa...
Question 7: Why is advisable to avoid consent as a legal basis for an em...
Question 8: According to the GDPR, how is pseudonymous personal data def...
Question 9: Which GDPR requirement will present the most significant cha...
Question 10: What practice does the USA FREEDOM Act NOT authorize?...
Question 11: An employee of company ABCD has just noticed a memory stick ...
Question 12: SCENARIO Please use the following to answer the next questio...
Question 13: Which of the following would NOT be relevant when determinin...
Question 14: What is true if an employee makes an access request to his e...
Question 15: SCENARIO Please use the following to answer the next questio...
Question 16: Which of the following describes a mandatory requirement for...
1 commentQuestion 17: Which of the following would MOST likely trigger the extrate...
Question 18: Under what circumstances would the GDPR apply to personal da...
Question 19: In addition to the European Commission, who can adopt standa...
Question 20: SCENARIO Please use the following to answer the next questio...
Question 21: If a company is planning to use closed-circuit television (C...
Question 22: A company is located in a country NOT considered by the Euro...
Question 23: Which of the following would most likely NOT be covered by t...
Question 24: SCENARIO Please use the following to answer the next questio...
Question 25: According to the GDPR, what is the main task of a Data Prote...
Question 26: What is the key difference between the European Council and ...
Question 27: How does the GDPR now define "processing"?...
Question 28: Tanya is the Data Protection Officer for Curtains Inc., a GD...
Question 29: Which entities must comply with the Telemarketing Sales Rule...
Question 30: Under the GDPR, where personal data is not obtained directly...
Question 31: What was the aim of the European Data Protection Directive 9...
Question 32: Which of the following countries will continue to enjoy adeq...
Question 33: An online company's privacy practices vary due to the fact t...
Question 34: When collecting personal data in a European Union (EU) membe...
Question 35: SCENARIO Please use the following to answer the next QUESTIO...
Question 36: SCENARIO Looking back at your first two years as the Directo...
Question 37: SCENARIO Please use the following to answer the next questio...
Question 38: Which is TRUE about the scope and authority of data protecti...
Question 39: Which area of privacy is a lead supervisory authority's (LSA...
Question 40: What obligation does a data controller or processor have aft...
Question 41: What is the consequence if a processor makes an independent ...
Question 42: Article 29 Working Party has emphasized that the GDPR forbid...
Question 43: SCENARIO Please use the following to answer the next questio...
Question 44: In which case would a controller who has undertaken a DPIA m...
Question 45: An organization is establishing a mission statement for its ...
Question 46: Which sentence best describes proper compliance for an inter...
Question 47: SCENARIO Please use the following to answer the next questio...
Question 48: SCENARIO WebTracker Limited is a cloud-based online marketin...
Question 49: Under Article 9 of the GDPR, which of the following categori...
Question 50: In the event of a data breach, which type of information are...
Question 51: A worker in a European Union (EU) member state has ceased hi...
Question 52: SCENARIO Please use the following to answer the next questio...
Question 53: Under Article 58 of the GDPR, which of the following describ...
Question 54: Under the GDPR, which essential pieces of information must b...
Question 55: An organisation receives a request multiple times from a dat...
Question 56: If a multi-national company wanted to conduct background che...
Question 57: Please use the following to answer the next question: Wonder...
Question 58: WP29's "Guidelines on Personal data breach notification unde...
Question 59: When may a financial institution share consumer information ...
Question 60: Which EU institution is vested with the competence to propos...
Question 61: SCENARIO Please use the following to answer the next questio...
Question 62: Which jurisdiction must courts have in order to hear a parti...