<< Prev Question Next Question >>

Question 24/62

SCENARIO
Please use the following to answer the next question:
TripBliss Inc. is a travel service company which has lost substantial revenue over the last few years. Their new manager, Oliver, suspects that this is partly due to the company's outdated website. After doing some research, he meets with a sales representative from the up-and-coming IT company Techiva, hoping that they can design a new, cutting-edge website for TripBliss Inc.'s foundering business.
During negotiations, a Techiva representative describes a plan for gathering more customer information through detailed Questionaires, which could be used to tailor their preferences to specific travel destinations.
TripBliss Inc. can choose any number of data categories - age, income, ethnicity - that would help them best accomplish their goals. Oliver loves this idea, but would also like to have some way of gauging how successful this approach is, especially since the Questionaires will require customers to provide explicit consent to having their data collected. The Techiva representative suggests that they also run a program to analyze the new website's traffic, in order to get a better understanding of how customers are using it. He explains his plan to place a number of cookies on customer devices. The cookies will allow the company to collect IP addresses and other information, such as the sites from which the customers came, how much time they spend on the TripBliss Inc. website, and which pages on the site they visit. All of this information will be compiled in log files, which Techiva will analyze by means of a special program. TripBliss Inc. would receive aggregate statistics to help them evaluate the website's effectiveness. Oliver enthusiastically engages Techiva for these services.
Techiva assigns the analytics portion of the project to longtime account manager Leon Santos. As is standard practice, Leon is given administrator rights to TripBliss Inc.'s website, and can authorize access to the log files gathered from it. Unfortunately for TripBliss Inc., however, Leon is taking on this new project at a time when his dissatisfaction with Techiva is at a high point. In order to take revenge for what he feels has been unfair treatment at the hands of the company, Leon asks his friend Fred, a hobby hacker, for help. Together they come up with the following plan: Fred will hack into Techiva's system and copy their log files onto a USB stick. Despite his initial intention to send the USB to the press and to the data protection authority in order to denounce Techiva, Leon experiences a crisis of conscience and ends up reconsidering his plan. He decides instead to securely wipe all the data from the USB stick and inform his manager that the company's system of access control must be reconsidered.
With regard to TripBliss Inc.'s use of website cookies, which of the following statements is correct?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (62q)
Question 1: Article 5(1)(b) of the GDPR states that personal data must b...
Question 2: In which scenario is a Controller most likely required to un...
Question 3: SCENARIO Please use the following to answer the next QUESTIO...
Question 4: SCENARIO WebTracker Limited is a cloud-based online marketin...
Question 5: SCENARIO Please use the following to answer the next questio...
Question 6: A key component of the OECD Guidelines is the "Individual Pa...
Question 7: Why is advisable to avoid consent as a legal basis for an em...
Question 8: According to the GDPR, how is pseudonymous personal data def...
Question 9: Which GDPR requirement will present the most significant cha...
Question 10: What practice does the USA FREEDOM Act NOT authorize?...
Question 11: An employee of company ABCD has just noticed a memory stick ...
Question 12: SCENARIO Please use the following to answer the next questio...
Question 13: Which of the following would NOT be relevant when determinin...
Question 14: What is true if an employee makes an access request to his e...
Question 15: SCENARIO Please use the following to answer the next questio...
Question 16: Which of the following describes a mandatory requirement for...
1 commentQuestion 17: Which of the following would MOST likely trigger the extrate...
Question 18: Under what circumstances would the GDPR apply to personal da...
Question 19: In addition to the European Commission, who can adopt standa...
Question 20: SCENARIO Please use the following to answer the next questio...
Question 21: If a company is planning to use closed-circuit television (C...
Question 22: A company is located in a country NOT considered by the Euro...
Question 23: Which of the following would most likely NOT be covered by t...
Question 24: SCENARIO Please use the following to answer the next questio...
Question 25: According to the GDPR, what is the main task of a Data Prote...
Question 26: What is the key difference between the European Council and ...
Question 27: How does the GDPR now define "processing"?...
Question 28: Tanya is the Data Protection Officer for Curtains Inc., a GD...
Question 29: Which entities must comply with the Telemarketing Sales Rule...
Question 30: Under the GDPR, where personal data is not obtained directly...
Question 31: What was the aim of the European Data Protection Directive 9...
Question 32: Which of the following countries will continue to enjoy adeq...
Question 33: An online company's privacy practices vary due to the fact t...
Question 34: When collecting personal data in a European Union (EU) membe...
Question 35: SCENARIO Please use the following to answer the next QUESTIO...
Question 36: SCENARIO Looking back at your first two years as the Directo...
Question 37: SCENARIO Please use the following to answer the next questio...
Question 38: Which is TRUE about the scope and authority of data protecti...
Question 39: Which area of privacy is a lead supervisory authority's (LSA...
Question 40: What obligation does a data controller or processor have aft...
Question 41: What is the consequence if a processor makes an independent ...
Question 42: Article 29 Working Party has emphasized that the GDPR forbid...
Question 43: SCENARIO Please use the following to answer the next questio...
Question 44: In which case would a controller who has undertaken a DPIA m...
Question 45: An organization is establishing a mission statement for its ...
Question 46: Which sentence best describes proper compliance for an inter...
Question 47: SCENARIO Please use the following to answer the next questio...
Question 48: SCENARIO WebTracker Limited is a cloud-based online marketin...
Question 49: Under Article 9 of the GDPR, which of the following categori...
Question 50: In the event of a data breach, which type of information are...
Question 51: A worker in a European Union (EU) member state has ceased hi...
Question 52: SCENARIO Please use the following to answer the next questio...
Question 53: Under Article 58 of the GDPR, which of the following describ...
Question 54: Under the GDPR, which essential pieces of information must b...
Question 55: An organisation receives a request multiple times from a dat...
Question 56: If a multi-national company wanted to conduct background che...
Question 57: Please use the following to answer the next question: Wonder...
Question 58: WP29's "Guidelines on Personal data breach notification unde...
Question 59: When may a financial institution share consumer information ...
Question 60: Which EU institution is vested with the competence to propos...
Question 61: SCENARIO Please use the following to answer the next questio...
Question 62: Which jurisdiction must courts have in order to hear a parti...