<< Prev Question Next Question >>

Question 13/116

SCENARIO
Please use the following to answer the next question:
Brady is a computer programmer based in New Zealand who has been running his own business for two years.
Brady's business provides a low-cost suite of services to customers throughout the European Economic Area (EEA). The services are targeted towards new and aspiring small business owners. Brady's company, called Brady Box, provides web page design services, a Social Networking Service (SNS) and consulting services that help people manage their own online stores.
Unfortunately, Brady has been receiving some complaints. A customer named Anna recently uploaded her plans for a new product onto Brady Box's chat area, which is open to public viewing. Although she realized her mistake two weeks later and removed the document, Anna is holding Brady Box responsible for not noticing the error through regular monitoring of the website. Brady believes he should not be held liable.
Another customer, Felipe, was alarmed to discover that his personal information was transferred to a third- party contractor called Hermes Designs and worries that sensitive information regarding his business plans may be misused. Brady does not believe he violated European privacy rules. He provides a privacy notice to all of his customers explicitly stating that personal data may be transferred to specific third parties in fulfillment of a requested service. Felipe says he read the privacy notice but that it was long and complicated Brady continues to insist that Felipe has no need to be concerned, as he can personally vouch for the integrity of Hermes Designs. In fact, Hermes Designs has taken the initiative to create sample customized banner advertisements for customers like Felipe. Brady is happy to provide a link to the example banner ads, now posted on the Hermes Designs webpage. Hermes Designs plans on following up with direct marketing to these customers.
Brady was surprised when another customer, Serge, expressed his dismay that a quotation by him is being used within a graphic collage on Brady Box's home webpage. The quotation is attributed to Serge by first and last name. Brady, however, was not worried about any sort of litigation. He wrote back to Serge to let him know that he found the quotation within Brady Box's Social Networking Service (SNS), as Serge himself had posted the quotation. In his response, Brady did offer to remove the quotation as a courtesy.
Despite some customer complaints, Brady's business is flourishing. He even supplements his income through online behavioral advertising (OBA) via a third-party ad network with whom he has set clearly defined roles.
Brady is pleased that, although some customers are not explicitly aware of the OBA, the advertisements contain useful products and services.
Under the General Data Protection Regulation (GDPR), what is the most likely reason Serge may have grounds to object to the use of his quotation?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (116q)
Question 1: According to the GDPR, what is the main task of a Data Prote...
Question 2: SCENARIO Please use the following to answer the next QUESTIO...
Question 3: When may browser settings be relied upon for the lawful appl...
Question 4: What is an exception to the Electronic Communications Privac...
Question 5: A large online bookseller decides to contract with a vendor ...
Question 6: A U.S.-based online shop uses sophisticated software to trac...
Question 7: Which of the following does NOT have to be included in the r...
Question 8: What are banks required to do under the Gramm-Leach-Bliley A...
Question 9: Which of these organizations would be required to provide it...
Question 10: Which of the following best describes an employer's privacy-...
Question 11: SCENARIO Please use the following to answer the next questio...
Question 12: What information did the Red Flag Program Clarification Act ...
Question 13: SCENARIO Please use the following to answer the next questio...
Question 14: Which mechanism, new to the GDPR, now allows for the possibi...
Question 15: In 2012, the White House and the FTC both issued reports adv...
Question 16: Which act violates the Family Educational Rights and Privacy...
Question 17: SCENARIO Please use the following to answer the next questio...
Question 18: Which of the following is an example of direct marketing tha...
Question 19: In addition to the European Commission, who can adopt standa...
Question 20: In which scenario is a Controller most likely required to un...
Question 21: What is the most important action an organization can take t...
Question 22: What is the consequence if a processor makes an independent ...
Question 23: What is the main challenge financial institutions face when ...
Question 24: Which of the following indicates you have developed the righ...
Question 25: Read this notice: Our website uses cookies. Cookies allow us...
Question 26: SCENARIO Please use the following to answer the next QUESTIO...
Question 27: When does the GDPR provide more latitude for a company to pr...
Question 28: Which of the following would NOT be relevant when determinin...
Question 29: Under what circumstances might the "soft opt-in" rule apply ...
Question 30: SCENARIO Please use the following to answer the next QUESTIO...
Question 31: Under the GDPR, where personal data is not obtained directly...
Question 32: How is the GDPR's position on consent MOST likely to affect ...
Question 33: In 2014, Google was alleged to have violated the Family Educ...
Question 34: When is data sharing agreement MOST likely to be needed?...
Question 35: Which statement is FALSE regarding the provisions of the Emp...
Question 36: SCENARIO Please use the following to answer the next questio...
Question 37: What permissions are required for a marketer to send an emai...
Question 38: There are three domains of security covered by Article 32 of...
Question 39: What is the function of the privacy operational life cycle?...
Question 40: SCENARIO Please use the following to answer the next questio...
Question 41: In a case of civil litigation, what might a defendant who is...
Question 42: SCENARIO Please use the following to answer the next questio...
Question 43: In what way does the "Red Flags Rule" under the Fair and Acc...
Question 44: SCENARIO Please use the following to answer the next questio...
Question 45: How is the retention of communications traffic data for law ...
Question 46: What is a reason the European Court of Justice declared the ...
Question 47: What is the main purpose of the CAN-SPAM Act?...
Question 48: A worker in a European Union (EU) member state has ceased hi...
Question 49: An employee of company ABCD has just noticed a memory stick ...
Question 50: Which jurisdiction must courts have in order to hear a parti...
Question 51: An organization is establishing a mission statement for its ...
Question 52: SCENARIO Please use the following to answer the next QUESTIO...
Question 53: What type of data lies beyond the scope of the General Data ...
Question 54: Article 9 of the GDPR lists exceptions to the general prohib...
Question 55: Which of the following would NOT constitute an exception to ...
Question 56: SCENARIO Please use the following to answer the next questio...
Question 57: SCENARIO Please use the following to answer the next questio...
Question 58: Which federal act does NOT contain provisions for preempting...
Question 59: Which is TRUE about the scope and authority of data protecti...
Question 60: Privacy Is Hiring Inc., a CA-based company, is an online spe...
Question 61: Acme Student Loan Company has developed an artificial intell...
Question 62: Which of the following would require designating a data prot...
Question 63: A Spanish electricity customer calls her local supplier with...
Question 64: What must a data controller do in order to make personal dat...
Question 65: Under Article 58 of the GDPR, which of the following describ...
Question 66: SCENARIO Please use the following to answer the next questio...
Question 67: More than half of U.S. states require telemarketers to?...
Question 68: Which of the following best describes the ASIA-Pacific Econo...
Question 69: SCENARIO Please use the following to answer the next questio...
Question 70: SCENARIO Please use the following to answer the next questio...
Question 71: Which of the following is commonly required for an entity to...
Question 72: SCENARIO Please use the following to answer the next QUESTIO...
Question 73: Which of the following describes the most likely risk for a ...
Question 74: SCENARIO Please use the following to answer the next QUESTIO...
Question 75: What is one reason the European Union has enacted more compr...
Question 76: What should a controller do after a data subject opts out of...
Question 77: When collecting personal data in a European Union (EU) membe...
Question 78: All of the following are tasks in the "Discover" phase of bu...
Question 79: When does the Telemarketing Sales Rule require an entity to ...
Question 80: A company in France suffers a robbery over the weekend owing...
Question 81: SCENARIO Please use the following to answer the next questio...
Question 82: SCENARIO Please use the following to answer the next questio...
Question 83: SCENARIO Please use the following to answer the next questio...
Question 84: What is the MAIN reason GDPR Article 4(22) establishes the c...
Question 85: SCENARIO Please use the following to answer the next questio...
Question 86: What practice does the USA FREEDOM Act NOT authorize?...
Question 87: In the event of a data breach, which type of information are...
Question 88: Smith Memorial Healthcare (SMH) is a hospital network headqu...
Question 89: To which of the following parties does the territorial scope...
Question 90: SCENARIO Please use the following to answer the next QUESTIO...
Question 91: SCENARIO Please use the following to answer the next QUESTIO...
Question 92: If an organization maintains data classified as high sensiti...
Question 93: What do the Civil Rights Act, Pregnancy Discrimination Act, ...
Question 94: Which law provides employee benefits, but often mandates the...
Question 95: SCENARIO Please use the following to answer the next QUESTIO...
Question 96: SCENARIO WebTracker Limited is a cloud-based online marketin...
Question 97: Article 5(1)(b) of the GDPR states that personal data must b...
Question 98: Which of the following accurately describes the purpose of a...
Question 99: What practice do courts commonly require in order to protect...
Question 100: According to FERPA, when can a school disclose records witho...
Question 101: SCENARIO Please use the following to answer the next QUESTIO...
Question 102: All of the following common law torts are relevant to employ...
Question 103: Which of the following is an important implication of the Do...
Question 104: SCENARIO Please use the following to answer the next questio...
Question 105: Which of the following federal agencies does NOT enforce the...
Question 106: Most states with data breach notification laws indicate that...
Question 107: Which aspect of the GDPR will likely have the most impact on...
Question 108: The Cable Communications Policy Act of 1984 requires which a...
Question 109: SCENARIO Please use the following to answer the next questio...
Question 110: SCENARIO Please use the following to answer the next questio...
Question 111: Which EU institution is vested with the competence to propos...
Question 112: SCENARIO Please use the following to answer the next QUESTIO...
Question 113: What consumer service was the Fair Credit Reporting Act (FCR...
Question 114: After leaving the EU under the terms of Brexit, the United K...
Question 115: A company is located in a country NOT considered by the Euro...
Question 116: A law enforcement subpoenas the ACME telecommunications comp...