<< Prev Question Next Question >>

Question 23/101

SCENARIO
Please use the following to answer the next question:
Brady is a computer programmer based in New Zealand who has been running his own business for two years. Brady's business provides a low-cost suite of services to customers throughout the European Economic Area (EEA). The services are targeted towards new and aspiring small business owners. Brady's company, called Brady Box, provides web page design services, a Social Networking Service (SNS) and consulting services that help people manage their own online stores.
Unfortunately, Brady has been receiving some complaints. A customer named Anna recently uploaded her plans for a new product onto Brady Box's chat area, which is open to public viewing. Although she realized her mistake two weeks later and removed the document, Anna is holding Brady Box responsible for not noticing the error through regular monitoring of the website. Brady believes he should not be held liable.
Another customer, Felipe, was alarmed to discover that his personal information was transferred to a third- party contractor called Hermes Designs and worries that sensitive information regarding his business plans may be misused. Brady does not believe he violated European privacy rules. He provides a privacy notice to all of his customers explicitly stating that personal data may be transferred to specific third parties in fulfillment of a requested service. Felipe says he read the privacy notice but that it was long and complicated Brady continues to insist that Felipe has no need to be concerned, as he can personally vouch for the integrity of Hermes Designs. In fact, Hermes Designs has taken the initiative to create sample customized banner advertisements for customers like Felipe. Brady is happy to provide a link to the example banner ads, now posted on the Hermes Designs webpage. Hermes Designs plans on following up with direct marketing to these customers.
Brady was surprised when another customer, Serge, expressed his dismay that a quotation by him is being used within a graphic collage on Brady Box's home webpage. The quotation is attributed to Serge by first and last name. Brady, however, was not worried about any sort of litigation. He wrote back to Serge to let him know that he found the quotation within Brady Box's Social Networking Service (SNS), as Serge himself had posted the quotation. In his response, Brady did offer to remove the quotation as a courtesy.
Despite some customer complaints, Brady's business is flourishing. He even supplements his income through online behavioral advertising (OBA) via a third-party ad network with whom he has set clearly defined roles. Brady is pleased that, although some customers are not explicitly aware of the OBA, the advertisements contain useful products and services.
Under the General Data Protection Regulation (GDPR), what is the most likely reason Serge may have grounds to object to the use of his quotation?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (101q)
Question 1: SCENARIO Please use the following to answer the next questio...
Question 2: A well-known video production company, based in Spain but sp...
Question 3: SCENARIO Please use the following to answer the next questio...
Question 4: With the issue of consent, the GDPR allows member states som...
Question 5: If a company chooses to ground an international data transfe...
Question 6: What is the most frequently used mechanism for legitimizing ...
Question 7: WP29's "Guidelines on Personal data breach notification unde...
Question 8: What is the key difference between the European Council and ...
Question 9: SCENARIO Please use the following to answer the next questio...
Question 10: What is an important difference between the European Court o...
Question 11: SCENARIO Please use the following to answer the next questio...
Question 12: Which sentence BEST summarizes the concepts of "fairness," "...
1 commentQuestion 13: The GDPR specifies fines that may be levied against data con...
1 commentQuestion 14: SCENARIO Please use the following to answer the next questio...
Question 15: SCENARIO Please use the following to answer the next questio...
Question 16: What is true if an employee makes an access request to his e...
Question 17: An organisation receives a request multiple times from a dat...
Question 18: Read the following steps: Discover which employees are acces...
Question 19: To provide evidence of GDPR compliance, a company performs a...
Question 20: SCENARIO Please use the following to answer the next questio...
Question 21: A well-known video production company, based in Spain but sp...
Question 22: Which of the following would require designating a data prot...
Question 23: SCENARIO Please use the following to answer the next questio...
Question 24: Which statement is correct when considering the right to pri...
Question 25: SCENARIO Please use the following to answer the next questio...
1 commentQuestion 26: Under which of the following conditions does the General Dat...
Question 27: SCENARIO Please use the following to answer the next questio...
Question 28: A grade school is planning to use facial recognition to trac...
Question 29: Which of the following was the first legally binding interna...
Question 30: Under the GDPR, who would be LEAST likely to be allowed to e...
Question 31: Under Article 21 of the GDPR, a controller must stop profili...
Question 32: SCENARIO Please use the following to answer the next questio...
Question 33: A company in France suffers a robbery over the weekend owing...
Question 34: SCENARIO Please use the following to answer the next questio...
Question 35: In which situation would a data controller most likely be ab...
Question 36: In the event of a data breach, which type of information are...
1 commentQuestion 37: Which of the following would MOST likely trigger the extrate...
Question 38: According to the European Data Protection Board, which of th...
Question 40: Pursuant to Article 4(5) of the GDPR, data is considered "ps...
Question 41: An unforeseen power outage results in company Z's lack of ac...
Question 42: As per the GDPR, which legal basis would be the most appropr...
Question 43: What should a controller do after a data subject opts out of...
Question 44: SCENARIO Please use the following to answer the next questio...
Question 45: In addition to the European Commission, who can adopt standa...
Question 46: If a company is planning to use closed-circuit television (C...
Question 47: What is the MAIN reason GDPR Article 4(22) establishes the c...
Question 48: The GDPR forbids the practice of "forum shopping", which occ...
Question 49: To which of the following parties does the territorial scope...
Question 50: If a French controller has a car-sharing app available only ...
Question 51: Under what circumstances might the "soft opt-in" rule apply ...
Question 52: Which of the following would NOT be relevant when determinin...
Question 53: A German data subject was the victim of an embarrassing pran...
Question 54: An organization receives a request multiple times from a dat...
Question 55: If a data subject puts a complaint before a DPA and receives...
Question 56: Which of the following does NOT have to be included in the r...
Question 57: SCENARIO Please use the following to answer the next questio...
Question 58: SCENARIO Please use the following to answer the next questio...
Question 59: What obligation does a data controller or processor have aft...
Question 60: SCENARIO Please use the following to answer the next questio...
Question 61: SCENARIO Please use the following to answer the next Questio...
Question 62: As a result of the European Court of Justice's ruling in the...
Question 63: In which of the following cases would an organization MOST L...
Question 64: A worker in a European Union (EU) member state has ceased hi...
Question 65: Under what circumstances would the GDPR apply to personal da...
Question 66: Which of the following is NOT considered a fair processing p...
Question 67: What is the key difference between the European Council and ...
Question 68: Which of the following countries will continue to enjoy adeq...
Question 69: Which type of personal data does the GDPR define as a "speci...
Question 70: An organization conducts body temperature checks as a part o...
Question 71: What is true if an employee makes an access request to his e...
Question 72: SCENARIO Please use the following to answer the next questio...
Question 73: SCENARIO Please use the following to answer the next questio...
Question 74: SCENARIO Please use the following to answer the next questio...
Question 75: Under what circumstances might the "soft opt-in" rule apply ...
Question 76: What term BEST describes the European model for data protect...
Question 77: Which of the following is one of the supervisory authority's...
Question 78: Based on GDPR Article 35, which of the following situations ...
Question 79: SCENARIO Please use the following to answer the next questio...
Question 80: SCENARIO Please use the following to answer the next questio...
Question 81: Which judicial body makes decisions on actions taken by indi...
Question 82: What is one major goal that the OECD Guidelines, Convention ...
Question 83: Under which of the following conditions does the General Dat...
Question 84: Which GDPR principle would a Spanish employer most likely de...
Question 85: What permissions are required for a marketer to send an emai...
Question 86: According to the E-Commerce Directive 2000/31/EC, where is t...
Question 87: A company is hesitating between Binding Corporate Rules and ...
Question 88: In which of the following situations would an individual mos...
Question 89: Which change was introduced by the 2009 amendments to the e-...
Question 90: SCENARIO Please use the following to answer the next questio...
Question 91: Tanya is the Data Protection Officer for Curtains Inc., a GD...
Question 92: What must be included in a written agreement between the con...
Question 93: SCENARIO Please use the following to answer the next questio...
Question 94: SCENARIO Please use the following to answer the next questio...
Question 95: Which EU institution is vested with the competence to propos...
Question 96: Tanya is the Data Protection Officer for Curtains Inc., a GD...
Question 97: SCENARIO Please use the following to answer the next questio...
Question 98: SCENARIO Please use the following to answer the next questio...
Question 99: SCENARIO Please use the following to answer the next questio...
Question 100: Which of the following is NOT an explicit right granted to d...
Question 101: Under Article 21 of the GDPR, a controller must stop profili...