<< Prev Question Next Question >>

Question 9/64

SCENARIO
Please use the following to answer the next question:
Brady is a computer programmer based in New Zealand who has been running his own business for two years.
Brady's business provides a low-cost suite of services to customers throughout the European Economic Area (EEA). The services are targeted towards new and aspiring small business owners. Brady's company, called Brady Box, provides web page design services, a Social Networking Service (SNS) and consulting services that help people manage their own online stores.
Unfortunately, Brady has been receiving some complaints. A customer named Anna recently uploaded her plans for a new product onto Brady Box's chat area, which is open to public viewing. Although she realized her mistake two weeks later and removed the document, Anna is holding Brady Box responsible for not noticing the error through regular monitoring of the website. Brady believes he should not be held liable.
Another customer, Felipe, was alarmed to discover that his personal information was transferred to a third- party contractor called Hermes Designs and worries that sensitive information regarding his business plans may be misused. Brady does not believe he violated European privacy rules. He provides a privacy notice to all of his customers explicitly stating that personal data may be transferred to specific third parties in fulfillment of a requested service. Felipe says he read the privacy notice but that it was long and complicated Brady continues to insist that Felipe has no need to be concerned, as he can personally vouch for the integrity of Hermes Designs. In fact, Hermes Designs has taken the initiative to create sample customized banner advertisements for customers like Felipe. Brady is happy to provide a link to the example banner ads, now posted on the Hermes Designs webpage. Hermes Designs plans on following up with direct marketing to these customers.
Brady was surprised when another customer, Serge, expressed his dismay that a quotation by him is being used within a graphic collage on Brady Box's home webpage. The quotation is attributed to Serge by first and last name. Brady, however, was not worried about any sort of litigation. He wrote back to Serge to let him know that he found the quotation within Brady Box's Social Networking Service (SNS), as Serge himself had posted the quotation. In his response, Brady did offer to remove the quotation as a courtesy.
Despite some customer complaints, Brady's business is flourishing. He even supplements his income through online behavioral advertising (OBA) via a third-party ad network with whom he has set clearly defined roles.
Brady is pleased that, although some customers are not explicitly aware of the OBA, the advertisements contain useful products and services.
Based on current trends in European privacy practices, which aspect of Brady Box' Online Behavioral Advertising (OBA) is most likely to be insufficient if the company becomes established in Europe?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (64q)
Question 1: Which of the following is an example of direct marketing tha...
Question 2: What is the function of the privacy operational life cycle?...
Question 3: SCENARIO Please use the following to answer the next questio...
Question 4: An unforeseen power outage results in company Z's lack of ac...
Question 5: SCENARIO Please use the following to answer the next QUESTIO...
Question 6: Which was NOT one of the five priority areas listed by the F...
Question 7: Which is the best way to view an organization's privacy fram...
Question 8: In which of the following cases, cited as an example by a WP...
Question 9: SCENARIO Please use the following to answer the next questio...
Question 10: Which is TRUE about the scope and authority of data protecti...
Question 11: SCENARIO Please use the following to answer the next questio...
Question 12: SCENARIO Tom looked forward to starting his new position wit...
Question 13: SCENARIO WebTracker Limited is a cloud-based online marketin...
Question 14: Which of the following is NOT a role of works councils?...
Question 15: WP29's "Guidelines on Personal data breach notification unde...
Question 16: If a multi-national company wanted to conduct background che...
Question 17: In which of the following cases would an organization MOST L...
Question 18: A key component of the OECD Guidelines is the "Individual Pa...
Question 19: In 2016's Guidance, the United Kingdom's Information Commiss...
Question 20: Read the following steps: * Discover which employees are acc...
Question 21: A company is hesitating between Binding Corporate Rules and ...
Question 22: Which GDPR requirement will present the most significant cha...
Question 23: When would a data subject NOT be able to exercise the right ...
Question 24: How is the retention of communications traffic data for law ...
Question 25: SCENARIO Please use the following to answer the next questio...
Question 26: A German data subject was the victim of an embarrassing pran...
Question 27: Which of the following would require designating a data prot...
Question 28: Company X has entrusted the processing of their payroll data...
Question 29: What should a controller do after a data subject opts out of...
Question 30: To which of the following parties does the territorial scope...
Question 31: Which sentence BEST summarizes the concepts of "fairness," "...
Question 32: SCENARIO Please use the following to answer the next questio...
Question 33: Which marketing-related activity is least likely to be cover...
Question 34: In the event of a data breach, which type of information are...
Question 35: SCENARIO Looking back at your first two years as the Directo...
Question 36: What is the MAIN reason GDPR Article 4(22) establishes the c...
Question 37: In which of the following situations would an individual mos...
Question 38: SCENARIO Please use the following to answer the next questio...
Question 39: SCENARIO Looking back at your first two years as the Directo...
Question 40: According to the GDPR, how is pseudonymous personal data def...
Question 41: How does the GDPR now define "processing"?...
Question 42: Article 9 of the GDPR lists exceptions to the general prohib...
Question 43: What is one major goal that the OECD Guidelines, Convention ...
Question 44: SCENARIO Please use the following to answer the next questio...
Question 45: A U.S.-based online shop uses sophisticated software to trac...
Question 46: Why is advisable to avoid consent as a legal basis for an em...
Question 47: Which change was introduced by the 2009 amendments to the e-...
Question 48: Which aspect of the GDPR will likely have the most impact on...
Question 49: What practice does the USA FREEDOM Act NOT authorize?...
Question 50: SCENARIO Please use the following to answer the next questio...
Question 51: A well-known video production company, based in Spain but sp...
Question 52: SCENARIO Please use the following to answer the next questio...
Question 53: SCENARIO Please use the following to answer the next questio...
Question 54: SCENARIO Please use the following to answer the next questio...
Question 55: After leaving the EU under the terms of Brexit, the United K...
Question 56: SCENARIO Please use the following to answer the next questio...
Question 57: SCENARIO Please use the following to answer the next questio...
Question 58: SCENARIO WebTracker Limited is a cloud-based online marketin...
Question 59: Article 5(1)(b) of the GDPR states that personal data must b...
Question 60: SCENARIO Please use the following to answer the next questio...
Question 61: Under what circumstances would the GDPR apply to personal da...
Question 62: SCENARIO Please use the following to answer the next questio...
Question 63: SCENARIO Please use the following to answer the next questio...
Question 64: What obligation does a data controller or processor have aft...