<< Prev Question Next Question >>

Question 22/31

SCENARIO
Please use the following to answer the next question:
Liem, an online retailer known for its environmentally friendly shoes, has recently expanded its presence in Europe. Anxious to achieve market dominance, Liem teamed up with another eco friendly company, EcoMick, which sells accessories like belts and bags. Together the companies drew up a series of marketing campaigns designed to highlight the environmental and economic benefits of their products. After months of planning, Liem and EcoMick entered into a data sharing agreement to use the same marketing database, MarketIQ, to send the campaigns to their respective contacts.
Liem and EcoMick also entered into a data processing agreement with MarketIQ, the terms of which included processing personal data only upon Liem and EcoMick's instructions, and making available to them all information necessary to demonstrate compliance with GDPR obligations.
Liem and EcoMick then procured the services of a company called JaphSoft, a marketing optimization firm that uses machine learning to help companies run successful campaigns. Clients provide JaphSoft with the personal data of individuals they would like to be targeted in each campaign. To ensure protection of its clients' data, JaphSoft implements the technical and organizational measures it deems appropriate. JaphSoft works to continually improve its machine learning models by analyzing the data it receives from its clients to determine the most successful components of a successful campaign. JaphSoft then uses such models in providing services to its client-base. Since the models improve only over a period of time as more information is collected, JaphSoft does not have a deletion process for the data it receives from clients. However, to ensure compliance with data privacy rules, JaphSoft pseudonymizes the personal data by removing identifying information from the contact information. JaphSoft's engineers, however, maintain all contact information in the same database as the identifying information.
Under its agreement with Liem and EcoMick, JaphSoft received access to MarketIQ, which included contact information as well as prior purchase history for such contacts, to create campaigns that would result in the most views of the two companies' websites. A prior Liem customer, Ms. Iman, received a marketing campaign from JaphSoft regarding Liem's as well as EcoMick's latest products. While Ms. Iman recalls checking a box to receive information in the future regarding Liem's products, she has never shopped EcoMick, nor provided her personal data to that company.
Under the GDPR, Liem and EcoMick's contract with MarketIQ must include all of the following provisions EXCEPT?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (31q)
Question 1: Under what circumstances might the "soft opt-in" rule apply ...
Question 2: Based on GDPR Article 35, which of the following situations ...
Question 3: When collecting personal data in a European Union (EU) membe...
Question 4: In 2016's Guidance, the United Kingdom's Information Commiss...
Question 5: Which of the following countries will continue to enjoy adeq...
Question 6: Which sentence BEST summarizes the concepts of "fairness," "...
Question 7: A U.S.-based online shop uses sophisticated software to trac...
Question 8: Assuming that the "without undue delay" provision is followe...
Question 9: SCENARIO Please use the following to answer the next questio...
Question 10: An unforeseen power outage results in company Z's lack of ac...
Question 11: In which of the following cases would an organization MOST L...
Question 12: Which area of privacy is a lead supervisory authority's (LSA...
Question 13: Under the GDPR, which of the following is true in regard to ...
Question 14: SCENARIO Please use the following to answer the next questio...
Question 15: What obligation does a data controller or processor have aft...
Question 16: SCENARIO Please use the following to answer the next questio...
Question 17: What should a controller do after a data subject opts out of...
Question 18: What is the MAIN reason GDPR Article 4(22) establishes the c...
Question 19: Which of the following would require designating a data prot...
Question 20: Under Article 21 of the GDPR, a controller must stop profili...
Question 21: Tanya is the Data Protection Officer for Curtains Inc., a GD...
Question 22: SCENARIO Please use the following to answer the next questio...
Question 23: How is the GDPR's position on consent MOST likely to affect ...
Question 24: What type of data lies beyond the scope of the General Data ...
Question 25: A mobile device application that uses cookies will be subjec...
Question 26: SCENARIO Please use the following to answer the next questio...
Question 27: Read the following steps: * Discover which employees are acc...
Question 28: What is the consequence if a processor makes an independent ...
Question 29: How is the retention of communications traffic data for law ...
Question 30: SCENARIO Please use the following to answer the next questio...
Question 31: Why is advisable to avoid consent as a legal basis for an em...