<< Prev Question Next Question >>

Question 104/116

SCENARIO
Please use the following to answer the next question:
Liem, an online retailer known for its environmentally friendly shoes, has recently expanded its presence in Europe. Anxious to achieve market dominance, Liem teamed up with another eco friendly company, EcoMick, which sells accessories like belts and bags. Together the companies drew up a series of marketing campaigns designed to highlight the environmental and economic benefits of their products. After months of planning, Liem and EcoMick entered into a data sharing agreement to use the same marketing database, MarketIQ, to send the campaigns to their respective contacts.
Liem and EcoMick also entered into a data processing agreement with MarketIQ, the terms of which included processing personal data only upon Liem and EcoMick's instructions, and making available to them all information necessary to demonstrate compliance with GDPR obligations.
Liem and EcoMick then procured the services of a company called JaphSoft, a marketing optimization firm that uses machine learning to help companies run successful campaigns. Clients provide JaphSoft with the personal data of individuals they would like to be targeted in each campaign. To ensure protection of its clients' data, JaphSoft implements the technical and organizational measures it deems appropriate. JaphSoft works to continually improve its machine learning models by analyzing the data it receives from its clients to determine the most successful components of a successful campaign. JaphSoft then uses such models in providing services to its client-base. Since the models improve only over a period of time as more information is collected, JaphSoft does not have a deletion process for the data it receives from clients. However, to ensure compliance with data privacy rules, JaphSoft pseudonymizes the personal data by removing identifying information from the contact information. JaphSoft's engineers, however, maintain all contact information in the same database as the identifying information.
Under its agreement with Liem and EcoMick, JaphSoft received access to MarketIQ, which included contact information as well as prior purchase history for such contacts, to create campaigns that would result in the most views of the two companies' websites. A prior Liem customer, Ms. Iman, received a marketing campaign from JaphSoft regarding Liem's as well as EcoMick's latest products. While Ms. Iman recalls checking a box to receive information in the future regarding Liem's products, she has never shopped EcoMick, nor provided her personal data to that company.
Under the GDPR, Liem and EcoMick's contract with MarketIQ must include all of the following provisions EXCEPT?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (116q)
Question 1: According to the GDPR, what is the main task of a Data Prote...
Question 2: SCENARIO Please use the following to answer the next QUESTIO...
Question 3: When may browser settings be relied upon for the lawful appl...
Question 4: What is an exception to the Electronic Communications Privac...
Question 5: A large online bookseller decides to contract with a vendor ...
Question 6: A U.S.-based online shop uses sophisticated software to trac...
Question 7: Which of the following does NOT have to be included in the r...
Question 8: What are banks required to do under the Gramm-Leach-Bliley A...
Question 9: Which of these organizations would be required to provide it...
Question 10: Which of the following best describes an employer's privacy-...
Question 11: SCENARIO Please use the following to answer the next questio...
Question 12: What information did the Red Flag Program Clarification Act ...
Question 13: SCENARIO Please use the following to answer the next questio...
Question 14: Which mechanism, new to the GDPR, now allows for the possibi...
Question 15: In 2012, the White House and the FTC both issued reports adv...
Question 16: Which act violates the Family Educational Rights and Privacy...
Question 17: SCENARIO Please use the following to answer the next questio...
Question 18: Which of the following is an example of direct marketing tha...
Question 19: In addition to the European Commission, who can adopt standa...
Question 20: In which scenario is a Controller most likely required to un...
Question 21: What is the most important action an organization can take t...
Question 22: What is the consequence if a processor makes an independent ...
Question 23: What is the main challenge financial institutions face when ...
Question 24: Which of the following indicates you have developed the righ...
Question 25: Read this notice: Our website uses cookies. Cookies allow us...
Question 26: SCENARIO Please use the following to answer the next QUESTIO...
Question 27: When does the GDPR provide more latitude for a company to pr...
Question 28: Which of the following would NOT be relevant when determinin...
Question 29: Under what circumstances might the "soft opt-in" rule apply ...
Question 30: SCENARIO Please use the following to answer the next QUESTIO...
Question 31: Under the GDPR, where personal data is not obtained directly...
Question 32: How is the GDPR's position on consent MOST likely to affect ...
Question 33: In 2014, Google was alleged to have violated the Family Educ...
Question 34: When is data sharing agreement MOST likely to be needed?...
Question 35: Which statement is FALSE regarding the provisions of the Emp...
Question 36: SCENARIO Please use the following to answer the next questio...
Question 37: What permissions are required for a marketer to send an emai...
Question 38: There are three domains of security covered by Article 32 of...
Question 39: What is the function of the privacy operational life cycle?...
Question 40: SCENARIO Please use the following to answer the next questio...
Question 41: In a case of civil litigation, what might a defendant who is...
Question 42: SCENARIO Please use the following to answer the next questio...
Question 43: In what way does the "Red Flags Rule" under the Fair and Acc...
Question 44: SCENARIO Please use the following to answer the next questio...
Question 45: How is the retention of communications traffic data for law ...
Question 46: What is a reason the European Court of Justice declared the ...
Question 47: What is the main purpose of the CAN-SPAM Act?...
Question 48: A worker in a European Union (EU) member state has ceased hi...
Question 49: An employee of company ABCD has just noticed a memory stick ...
Question 50: Which jurisdiction must courts have in order to hear a parti...
Question 51: An organization is establishing a mission statement for its ...
Question 52: SCENARIO Please use the following to answer the next QUESTIO...
Question 53: What type of data lies beyond the scope of the General Data ...
Question 54: Article 9 of the GDPR lists exceptions to the general prohib...
Question 55: Which of the following would NOT constitute an exception to ...
Question 56: SCENARIO Please use the following to answer the next questio...
Question 57: SCENARIO Please use the following to answer the next questio...
Question 58: Which federal act does NOT contain provisions for preempting...
Question 59: Which is TRUE about the scope and authority of data protecti...
Question 60: Privacy Is Hiring Inc., a CA-based company, is an online spe...
Question 61: Acme Student Loan Company has developed an artificial intell...
Question 62: Which of the following would require designating a data prot...
Question 63: A Spanish electricity customer calls her local supplier with...
Question 64: What must a data controller do in order to make personal dat...
Question 65: Under Article 58 of the GDPR, which of the following describ...
Question 66: SCENARIO Please use the following to answer the next questio...
Question 67: More than half of U.S. states require telemarketers to?...
Question 68: Which of the following best describes the ASIA-Pacific Econo...
Question 69: SCENARIO Please use the following to answer the next questio...
Question 70: SCENARIO Please use the following to answer the next questio...
Question 71: Which of the following is commonly required for an entity to...
Question 72: SCENARIO Please use the following to answer the next QUESTIO...
Question 73: Which of the following describes the most likely risk for a ...
Question 74: SCENARIO Please use the following to answer the next QUESTIO...
Question 75: What is one reason the European Union has enacted more compr...
Question 76: What should a controller do after a data subject opts out of...
Question 77: When collecting personal data in a European Union (EU) membe...
Question 78: All of the following are tasks in the "Discover" phase of bu...
Question 79: When does the Telemarketing Sales Rule require an entity to ...
Question 80: A company in France suffers a robbery over the weekend owing...
Question 81: SCENARIO Please use the following to answer the next questio...
Question 82: SCENARIO Please use the following to answer the next questio...
Question 83: SCENARIO Please use the following to answer the next questio...
Question 84: What is the MAIN reason GDPR Article 4(22) establishes the c...
Question 85: SCENARIO Please use the following to answer the next questio...
Question 86: What practice does the USA FREEDOM Act NOT authorize?...
Question 87: In the event of a data breach, which type of information are...
Question 88: Smith Memorial Healthcare (SMH) is a hospital network headqu...
Question 89: To which of the following parties does the territorial scope...
Question 90: SCENARIO Please use the following to answer the next QUESTIO...
Question 91: SCENARIO Please use the following to answer the next QUESTIO...
Question 92: If an organization maintains data classified as high sensiti...
Question 93: What do the Civil Rights Act, Pregnancy Discrimination Act, ...
Question 94: Which law provides employee benefits, but often mandates the...
Question 95: SCENARIO Please use the following to answer the next QUESTIO...
Question 96: SCENARIO WebTracker Limited is a cloud-based online marketin...
Question 97: Article 5(1)(b) of the GDPR states that personal data must b...
Question 98: Which of the following accurately describes the purpose of a...
Question 99: What practice do courts commonly require in order to protect...
Question 100: According to FERPA, when can a school disclose records witho...
Question 101: SCENARIO Please use the following to answer the next QUESTIO...
Question 102: All of the following common law torts are relevant to employ...
Question 103: Which of the following is an important implication of the Do...
Question 104: SCENARIO Please use the following to answer the next questio...
Question 105: Which of the following federal agencies does NOT enforce the...
Question 106: Most states with data breach notification laws indicate that...
Question 107: Which aspect of the GDPR will likely have the most impact on...
Question 108: The Cable Communications Policy Act of 1984 requires which a...
Question 109: SCENARIO Please use the following to answer the next questio...
Question 110: SCENARIO Please use the following to answer the next questio...
Question 111: Which EU institution is vested with the competence to propos...
Question 112: SCENARIO Please use the following to answer the next QUESTIO...
Question 113: What consumer service was the Fair Credit Reporting Act (FCR...
Question 114: After leaving the EU under the terms of Brexit, the United K...
Question 115: A company is located in a country NOT considered by the Euro...
Question 116: A law enforcement subpoenas the ACME telecommunications comp...