<< Prev Question Next Question >>

Question 110/116

SCENARIO
Please use the following to answer the next question:
WonderkKids provides an online booking service for childcare. Wonderkids is based in France, but hosts its website through a company in Switzerland. As part of their service, WonderKids will pass all personal data provided to them to the childcare provider booked through their system. The type of personal data collected on the website includes the name of the person booking the childcare, address and contact details, as well as information about the children to be cared for including name, age, gender and health information. The privacy statement on Wonderkids' website states the following:
"WonderkKids provides the information you disclose to us through this website to your childcare provider for scheduling and health and safety reasons. We may also use your and your child's personal information for our own legitimate business purposes and we employ a third-party website hosting company located in Switzerland to store the data. Any data stored on equipment located in Switzerland meets the European Commission provisions for guaranteeing adequate safeguards for you and your child's personal information.
We will only share you and your child's personal information with businesses that we see as adding real value to you. By providing us with any personal data, you consent to its transfer to affiliated businesses and to send you promotional offers."
"We may retain you and your child's personal information for no more than 28 days, at which point the data will be depersonalized, unless your personal information is being used for a legitimate business purpose beyond 28 days where it may be retained for up to 2 years."
"We are processing you and your child's personal information with your consent. If you choose not to provide certain information to us, you may not be able to use our services. You have the right to: request access to you and your child's personal information; rectify or erase you or your child's personal information; the right to correction or erasure of you and/or your child's personal information; object to any processing of you and your child's personal information. You also have the right to complain to the supervisory authority about our data processing activities." What additional information must Wonderkids provide in their Privacy Statement?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (116q)
Question 1: According to the GDPR, what is the main task of a Data Prote...
Question 2: SCENARIO Please use the following to answer the next QUESTIO...
Question 3: When may browser settings be relied upon for the lawful appl...
Question 4: What is an exception to the Electronic Communications Privac...
Question 5: A large online bookseller decides to contract with a vendor ...
Question 6: A U.S.-based online shop uses sophisticated software to trac...
Question 7: Which of the following does NOT have to be included in the r...
Question 8: What are banks required to do under the Gramm-Leach-Bliley A...
Question 9: Which of these organizations would be required to provide it...
Question 10: Which of the following best describes an employer's privacy-...
Question 11: SCENARIO Please use the following to answer the next questio...
Question 12: What information did the Red Flag Program Clarification Act ...
Question 13: SCENARIO Please use the following to answer the next questio...
Question 14: Which mechanism, new to the GDPR, now allows for the possibi...
Question 15: In 2012, the White House and the FTC both issued reports adv...
Question 16: Which act violates the Family Educational Rights and Privacy...
Question 17: SCENARIO Please use the following to answer the next questio...
Question 18: Which of the following is an example of direct marketing tha...
Question 19: In addition to the European Commission, who can adopt standa...
Question 20: In which scenario is a Controller most likely required to un...
Question 21: What is the most important action an organization can take t...
Question 22: What is the consequence if a processor makes an independent ...
Question 23: What is the main challenge financial institutions face when ...
Question 24: Which of the following indicates you have developed the righ...
Question 25: Read this notice: Our website uses cookies. Cookies allow us...
Question 26: SCENARIO Please use the following to answer the next QUESTIO...
Question 27: When does the GDPR provide more latitude for a company to pr...
Question 28: Which of the following would NOT be relevant when determinin...
Question 29: Under what circumstances might the "soft opt-in" rule apply ...
Question 30: SCENARIO Please use the following to answer the next QUESTIO...
Question 31: Under the GDPR, where personal data is not obtained directly...
Question 32: How is the GDPR's position on consent MOST likely to affect ...
Question 33: In 2014, Google was alleged to have violated the Family Educ...
Question 34: When is data sharing agreement MOST likely to be needed?...
Question 35: Which statement is FALSE regarding the provisions of the Emp...
Question 36: SCENARIO Please use the following to answer the next questio...
Question 37: What permissions are required for a marketer to send an emai...
Question 38: There are three domains of security covered by Article 32 of...
Question 39: What is the function of the privacy operational life cycle?...
Question 40: SCENARIO Please use the following to answer the next questio...
Question 41: In a case of civil litigation, what might a defendant who is...
Question 42: SCENARIO Please use the following to answer the next questio...
Question 43: In what way does the "Red Flags Rule" under the Fair and Acc...
Question 44: SCENARIO Please use the following to answer the next questio...
Question 45: How is the retention of communications traffic data for law ...
Question 46: What is a reason the European Court of Justice declared the ...
Question 47: What is the main purpose of the CAN-SPAM Act?...
Question 48: A worker in a European Union (EU) member state has ceased hi...
Question 49: An employee of company ABCD has just noticed a memory stick ...
Question 50: Which jurisdiction must courts have in order to hear a parti...
Question 51: An organization is establishing a mission statement for its ...
Question 52: SCENARIO Please use the following to answer the next QUESTIO...
Question 53: What type of data lies beyond the scope of the General Data ...
Question 54: Article 9 of the GDPR lists exceptions to the general prohib...
Question 55: Which of the following would NOT constitute an exception to ...
Question 56: SCENARIO Please use the following to answer the next questio...
Question 57: SCENARIO Please use the following to answer the next questio...
Question 58: Which federal act does NOT contain provisions for preempting...
Question 59: Which is TRUE about the scope and authority of data protecti...
Question 60: Privacy Is Hiring Inc., a CA-based company, is an online spe...
Question 61: Acme Student Loan Company has developed an artificial intell...
Question 62: Which of the following would require designating a data prot...
Question 63: A Spanish electricity customer calls her local supplier with...
Question 64: What must a data controller do in order to make personal dat...
Question 65: Under Article 58 of the GDPR, which of the following describ...
Question 66: SCENARIO Please use the following to answer the next questio...
Question 67: More than half of U.S. states require telemarketers to?...
Question 68: Which of the following best describes the ASIA-Pacific Econo...
Question 69: SCENARIO Please use the following to answer the next questio...
Question 70: SCENARIO Please use the following to answer the next questio...
Question 71: Which of the following is commonly required for an entity to...
Question 72: SCENARIO Please use the following to answer the next QUESTIO...
Question 73: Which of the following describes the most likely risk for a ...
Question 74: SCENARIO Please use the following to answer the next QUESTIO...
Question 75: What is one reason the European Union has enacted more compr...
Question 76: What should a controller do after a data subject opts out of...
Question 77: When collecting personal data in a European Union (EU) membe...
Question 78: All of the following are tasks in the "Discover" phase of bu...
Question 79: When does the Telemarketing Sales Rule require an entity to ...
Question 80: A company in France suffers a robbery over the weekend owing...
Question 81: SCENARIO Please use the following to answer the next questio...
Question 82: SCENARIO Please use the following to answer the next questio...
Question 83: SCENARIO Please use the following to answer the next questio...
Question 84: What is the MAIN reason GDPR Article 4(22) establishes the c...
Question 85: SCENARIO Please use the following to answer the next questio...
Question 86: What practice does the USA FREEDOM Act NOT authorize?...
Question 87: In the event of a data breach, which type of information are...
Question 88: Smith Memorial Healthcare (SMH) is a hospital network headqu...
Question 89: To which of the following parties does the territorial scope...
Question 90: SCENARIO Please use the following to answer the next QUESTIO...
Question 91: SCENARIO Please use the following to answer the next QUESTIO...
Question 92: If an organization maintains data classified as high sensiti...
Question 93: What do the Civil Rights Act, Pregnancy Discrimination Act, ...
Question 94: Which law provides employee benefits, but often mandates the...
Question 95: SCENARIO Please use the following to answer the next QUESTIO...
Question 96: SCENARIO WebTracker Limited is a cloud-based online marketin...
Question 97: Article 5(1)(b) of the GDPR states that personal data must b...
Question 98: Which of the following accurately describes the purpose of a...
Question 99: What practice do courts commonly require in order to protect...
Question 100: According to FERPA, when can a school disclose records witho...
Question 101: SCENARIO Please use the following to answer the next QUESTIO...
Question 102: All of the following common law torts are relevant to employ...
Question 103: Which of the following is an important implication of the Do...
Question 104: SCENARIO Please use the following to answer the next questio...
Question 105: Which of the following federal agencies does NOT enforce the...
Question 106: Most states with data breach notification laws indicate that...
Question 107: Which aspect of the GDPR will likely have the most impact on...
Question 108: The Cable Communications Policy Act of 1984 requires which a...
Question 109: SCENARIO Please use the following to answer the next questio...
Question 110: SCENARIO Please use the following to answer the next questio...
Question 111: Which EU institution is vested with the competence to propos...
Question 112: SCENARIO Please use the following to answer the next QUESTIO...
Question 113: What consumer service was the Fair Credit Reporting Act (FCR...
Question 114: After leaving the EU under the terms of Brexit, the United K...
Question 115: A company is located in a country NOT considered by the Euro...
Question 116: A law enforcement subpoenas the ACME telecommunications comp...