<< Prev Question Next Question >>

Question 21/81

SCENARIO
Please use the following to answer the next question:
Liem, an online retailer known for its environmentally friendly shoes, has recently expanded its presence in Europe. Anxious to achieve market dominance, Liem teamed up with another eco friendly company, EcoMick, which sells accessories like belts and bags. Together the companies drew up a series of marketing campaigns designed to highlight the environmental and economic benefits of their products. After months of planning, Liem and EcoMick entered into a data sharing agreement to use the same marketing database, MarketIQ, to send the campaigns to their respective contacts.
Liem and EcoMick also entered into a data processing agreement with MarketIQ, the terms of which included processing personal data only upon Liem and EcoMick's instructions, and making available to them all information necessary to demonstrate compliance with GDPR obligations.
Liem and EcoMick then procured the services of a company called JaphSoft, a marketing optimization firm that uses machine learning to help companies run successful campaigns. Clients provide JaphSoft with the personal data of individuals they would like to be targeted in each campaign. To ensure protection of its clients' data, JaphSoft implements the technical and organizational measures it deems appropriate. JaphSoft works to continually improve its machine learning models by analyzing the data it receives from its clients to determine the most successful components of a successful campaign. JaphSoft then uses such models in providing services to its client-base. Since the models improve only over a period of time as more information is collected, JaphSoft does not have a deletion process for the data it receives from clients. However, to ensure compliance with data privacy rules, JaphSoft pseudonymizes the personal data by removing identifying information from the contact information. JaphSoft's engineers, however, maintain all contact information in the same database as the identifying information.
Under its agreement with Liem and EcoMick, JaphSoft received access to MarketIQ, which included contact information as well as prior purchase history for such contacts, to create campaigns that would result in the most views of the two companies' websites. A prior Liem customer, Ms. Iman, received a marketing campaign from JaphSoft regarding Liem's as well as EcoMick's latest products. While Ms. Iman recalls checking a box to receive information in the future regarding Liem's products, she has never shopped EcoMick, nor provided her personal data to that company.
Which of the following BEST describes the relationship between Liem, EcoMick and JaphSoft?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (81q)
Question 1: To receive a preliminary interpretation on provisions of the...
Question 2: Please use the following to answer the next question: Joe st...
Question 3: The GDPR forbids the practice of "forum shopping", which occ...
Question 4: SCENARIO Please use the following to answer the next questio...
Question 5: A multinational company is appointing a mandatory data prote...
Question 6: When is data sharing agreement MOST likely to be needed?...
Question 7: SCENARIO Please use the following to answer the next questio...
Question 8: When may browser settings be relied upon for the lawful appl...
Question 9: Which of the following countries will continue to enjoy adeq...
Question 10: Please use the following to answer the next question: Due to...
Question 11: Article 58 of the GDPR describes the power of supervisory au...
Question 12: SCENARIO Please use the following to answer the next questio...
Question 13: When does the European Data Protection Board (EDPB) recommen...
Question 14: In which of the following cases, cited as an example by a WP...
Question 15: What should a controller do after a data subject opts out of...
Question 16: Which institution has the power to adopt findings that confi...
Question 17: SCENARIO Please use the following to answer the next questio...
Question 18: If a company is planning to use closed-circuit television (C...
Question 19: After leaving the EU under the terms of Brexit, the United K...
Question 20: Under what circumstances would the GDPR apply to personal da...
Question 21: SCENARIO Please use the following to answer the next questio...
Question 22: A mobile device application that uses cookies will be subjec...
Question 23: Which of the following describes a mandatory requirement for...
Question 24: SCENARIO Please use the following to answer the next questio...
Question 25: In which of the following cases would an organization MOST L...
Question 26: Bioface is a company based in the United States. It has no s...
Question 27: SCENARIO Please use the following to answer the next questio...
Question 28: How is the retention of communications traffic data for law ...
Question 29: Please use the following to answer the next question: Due to...
Question 30: SCENARIO Please use the following to answer the next questio...
Question 31: SCENARIO Please use the following to answer the next questio...
Question 32: Company X has entrusted the processing of their payroll data...
Question 33: Which of the following is NOT recognized as being a common c...
Question 34: A worker in a European Union (EU) member state has ceased hi...
Question 35: SCENARIO Please use the following to answer the next questio...
Question 36: Under what circumstances might the "soft opt-in" rule apply ...
Question 37: Which of the following demonstrates compliance with the acco...
Question 38: SCENARIO Please use the following to answer the next questio...
Question 39: What is the most frequently used mechanism for legitimizing ...
Question 40: A key component of the OECD Guidelines is the "Individual Pa...
Question 41: What is the MAIN reason GDPR Article 4(22) establishes the c...
Question 42: If a company chooses to ground an international data transfe...
Question 43: SCENARIO Please use the following to answer the next questio...
Question 44: What is the key difference between the European Council and ...
Question 45: SCENARIO Please use the following to answer the next questio...
Question 46: Based on GDPR Article 35, which of the following situations ...
Question 47: A Spanish electricity customer calls her local supplier with...
Question 48: SCENARIO Please use the following to answer the next questio...
Question 49: In which situation would a data controller most likely be ab...
Question 50: Tanya is the Data Protection Officer for Curtains Inc., a GD...
Question 51: Under the GDPR, which essential pieces of information must b...
Question 52: SCENARIO Please use the following to answer the next questio...
Question 53: As a result of the European Court of Justice's ruling in the...
Question 54: Read the following steps: Discover which employees are acces...
Question 55: SCENARIO Please use the following to answer the next questio...
Question 56: Which GDPR requirement will present the most significant cha...
Question 57: A U.S.-based online shop uses sophisticated software to trac...
Question 58: SCENARIO Please use the following to answer the next questio...
Question 59: What must a data controller do in order to make personal dat...
Question 60: What are the obligations of a processor that engages a sub-p...
Question 61: An employee of company ABCD has just noticed a memory stick ...
Question 62: Under the GDPR, which essential pieces of information must b...
Question 63: SCENARIO Please use the following to answer the next questio...
Question 64: SCENARIO Please use the following to answer the next questio...
Question 65: An organization conducts body temperature checks as a part o...
Question 66: According to the GDPR, when should the processing of photogr...
Question 67: An online company's privacy practices vary due to the fact t...
Question 68: What is a reason the European Court of Justice declared the ...
Question 69: Which change was introduced by the 2009 amendments to the e-...
Question 70: Under Article 30 of the GDPR, controllers are required to ke...
Question 71: As per the GDPR, which legal basis would be the most appropr...
Question 72: SCENARIO Please use the following to answer the next questio...
Question 73: SCENARIO Please use the following to answer the next questio...
Question 74: Under the Data Protection Law Enforcement Directive of the E...
Question 75: With the issue of consent, the GDPR allows member states som...
Question 76: When hiring a data processor, which action would a data cont...
Question 77: An organisation receives a request multiple times from a dat...
Question 78: Which of the following is NOT an explicit right granted to d...
Question 79: According to Article 84 of the GDPR, the rules on penalties ...
Question 80: An unforeseen power outage results in company Z's lack of ac...
Question 81: Under Article 80(1) of the GDPR, individuals can elect to be...