Valid CIPP-E Dumps shared by ExamDiscuss.com for Helping Passing CIPP-E Exam! ExamDiscuss.com now offer the newest CIPP-E exam dumps, the ExamDiscuss.com CIPP-E exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com CIPP-E dumps with Test Engine here:

Access CIPP-E Dumps Premium Version
(298 Q&As Dumps, 35%OFF Special Discount Code: freecram)

<< Prev Question Next Question >>

Question 65/114

SCENARIO
Please use the following to answer the next question:
Liem, an online retailer known for its environmentally friendly shoes, has recently expanded its presence in Europe. Anxious to achieve market dominance, Liem teamed up with another eco friendly company, EcoMick, which sells accessories like belts and bags. Together the companies drew up a series of marketing campaigns designed to highlight the environmental and economic benefits of their products. After months of planning, Liem and EcoMick entered into a data sharing agreement to use the same marketing database, MarketIQ, to send the campaigns to their respective contacts.
Liem and EcoMick also entered into a data processing agreement with MarketIQ, the terms of which included processing personal data only upon Liem and EcoMick's instructions, and making available to them all information necessary to demonstrate compliance with GDPR obligations.
Liem and EcoMick then procured the services of a company called JaphSoft, a marketing optimization firm that uses machine learning to help companies run successful campaigns. Clients provide JaphSoft with the personal data of individuals they would like to be targeted in each campaign. To ensure protection of its clients' data, JaphSoft implements the technical and organizational measures it deems appropriate. JaphSoft works to continually improve its machine learning models by analyzing the data it receives from its clients to determine the most successful components of a successful campaign. JaphSoft then uses such models in providing services to its client-base. Since the models improve only over a period of time as more information is collected, JaphSoft does not have a deletion process for the data it receives from clients. However, to ensure compliance with data privacy rules, JaphSoft pseudonymizes the personal data by removing identifying information from the contact information. JaphSoft's engineers, however, maintain all contact information in the same database as the identifying information.
Under its agreement with Liem and EcoMick, JaphSoft received access to MarketIQ, which included contact information as well as prior purchase history for such contacts, to create campaigns that would result in the most views of the two companies' websites. A prior Liem customer, Ms. Iman, received a marketing campaign from JaphSoft regarding Liem's as well as EcoMick's latest products. While Ms. Iman recalls checking a box to receive information in the future regarding Liem's products, she has never shopped EcoMick, nor provided her personal data to that company.
For what reason would JaphSoft be considered a controller under the GDPR?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (114q)
Question 1: According to the GDPR, what is the main task of a Data Prote...
Question 2: The GDPR forbids the practice of "forum shopping", which occ...
Question 3: Which of the following is NOT an explicit right granted to d...
Question 4: SCENARIO Please use the following to answer the next questio...
Question 5: If a company chooses to ground an international data transfe...
Question 6: How is the GDPR's position on consent MOST likely to affect ...
Question 7: SCENARIO Please use the following to answer the next questio...
Question 8: SCENARIO Please use the following to answer the next questio...
Question 9: Which of the following would NOT be relevant when determinin...
Question 10: SCENARIO Please use the following to answer the next questio...
Question 11: In which case would a controller who has undertaken a DPIA m...
Question 12: Which of the following would require designating a data prot...
Question 13: An entity's website stores text files on EU users' computer ...
Question 14: The European Parliament jointly exercises legislative and bu...
Question 15: When assessing the level of risk created by a data breach, w...
Question 16: SCENARIO Please use the following to answer the next questio...
Question 17: Pursuant to Article 17 and EDPB Guidelines S'2019 on RTBF cr...
Question 18: When may browser settings be relied upon for the lawful appl...
Question 19: Which of the following is NOT recognized as being a common c...
Question 20: SCENARIO Please use the following to answer the next questio...
Question 21: According to Article 14 of the GDPR, how long does a control...
Question 22: SCENARIO Please use the following to answer the next questio...
Question 23: In addition to the European Commission, who can adopt standa...
Question 24: What must be included in a written agreement between the con...
Question 25: Under which of the following conditions does the General Dat...
Question 26: After leaving the EU under the terms of Brexit, the United K...
Question 27: SCENARIO Please use the following to answer the next questio...
Question 28: What is the consequence if a processor makes an independent ...
Question 29: In the Planet 49 case, what was the man judgement of the Coo...
Question 30: SCENARIO Please use the following to answer the next questio...
Question 31: Based on GDPR Article 35, which of the following situations ...
Question 32: Under the GDPR, where personal data is not obtained directly...
Question 33: If a multi-national company wanted to conduct background che...
Question 34: Which of the following Convention 108+ principles, as amende...
Question 35: SCENARIO Please use the following to answer the next questio...
Question 36: What type of data lies beyond the scope of the General Data ...
Question 37: SCENARIO Please use the following to answer the next questio...
Question 38: Which aspect of the GDPR will likely have the most impact on...
Question 39: A company in France suffers a robbery over the weekend owing...
Question 40: Which of the following was the first legally binding interna...
Question 41: Articles 13 and 14 of the GDPR provide details on the obliga...
Question 42: A data controller appoints a data protection officer. Which ...
Question 43: What is the main task of the European Data Protection Board?...
Question 44: According to Article 84 of the GDPR, the rules on penalties ...
Question 45: SCENARIO Please use the following to answer the next questio...
Question 46: SCENARIO Please use the following to answer the next questio...
Question 47: Which of the following entities would most likely be exempt ...
Question 48: In the event of a data breach, which type of information are...
Question 49: Which GDPR requirement will present the most significant cha...
Question 50: As a result of the European Court of Justice's ruling in the...
Question 51: Two companies, Gellcoat and Freifish, make plans to launch a...
Question 52: Which marketing-related activity is least likely to be cover...
Question 53: According to the GDPR, how is pseudonymous personal data def...
Question 54: Under Article 80(1) of the GDPR, individuals can elect to be...
Question 55: SCENARIO Please use the following to answer the next questio...
Question 56: According to the European Data Protection Board, which of th...
Question 57: SCENARIO Please use the following to answer the next questio...
Question 58: SCENARIO Please use the following to answer the next questio...
Question 59: Which of the following does NOT have to be included in the r...
Question 60: According to the GDPR, when should the processing of photogr...
Question 61: A U.S.-based online shop uses sophisticated software to trac...
Question 62: SCENARIO Please use the following to answer the next questio...
Question 63: Which EU institution is vested with the competence to propos...
Question 64: If two controllers act as joint controllers pursuant to Arti...
Question 65: SCENARIO Please use the following to answer the next questio...
Question 66: To provide evidence of GDPR compliance, a company performs a...
Question 67: A company would like to implement CCTV monitoring in its off...
Question 68: What permissions are required for a marketer to send an emai...
Question 69: Which of the following is an example of direct marketing tha...
Question 70: A company is hesitating between Binding Corporate Rules and ...
Question 71: SCENARIO Please use the following to answer the next questio...
Question 72: SCENARIO Please use the following to answer the next questio...
Question 73: Which type of personal data does the GDPR define as a "speci...
Question 74: What was the aim of the European Data Protection Directive 9...
Question 75: Which of the following would most likely NOT be covered by t...
Question 76: What was the main failing of Convention 108 that led to the ...
Question 77: Under the GDPR, which of the following is true in regard to ...
Question 78: To which of the following parties does the territorial scope...
Question 79: According to the European Data Protection Board, data subjec...
Question 80: When does the GDPR provide more latitude for a company to pr...
Question 81: When hiring a data processor, which action would a data cont...
Question 82: Which of the following would MOST likely trigger the extrate...
Question 83: SCENARIO Please use the following to answer the next questio...
Question 84: A grade school is planning to use facial recognition to trac...
Question 85: SCENARIO Please use the following to answer the next questio...
Question 86: SCENARIO Please use the following to answer the next questio...
Question 87: Higher fines are assessed for GDPR violations due to which o...
Question 88: Which area of privacy is a lead supervisory authority's (LSA...
Question 89: Read the following steps: Discover which employees are acces...
Question 90: If a French controller has a car-sharing app available only ...
Question 91: Which of the following is the weakest lawful basis for proce...
Question 92: An online company's privacy practices vary due to the fact t...
Question 93: Which sentence BEST summarizes the concepts of "fairness," "...
Question 94: When collecting personal data in a European Union (EU) membe...
Question 95: SCENARIO Please use the following to answer the next questio...
Question 96: SCENARIO Please use the following to answer the next questio...
Question 97: A key component of the OECD Guidelines is the "Individual Pa...
Question 98: Under what circumstances might the "soft opt-in" rule apply ...
Question 99: Which of the following is NOT exempt from the material scope...
Question 100: What is an important difference between the European Court o...
Question 101: What are the obligations of a processor that engages a sub-p...
Question 102: Which kind of privacy notice, originally advocated by the Ar...
Question 103: Which of the following countries will continue to enjoy adeq...
Question 104: Which mechanism, new to the GDPR, now allows for the possibi...
Question 105: Bioface is a company based in the United States. It has no s...
Question 106: SCENARIO Please use the following to answer the next questio...
Question 107: A news website based m (he United Slates reports primarily o...
Question 108: According to the E-Commerce Directive 2000/31/EC, where is t...
Question 109: What term BEST describes the European model for data protect...
Question 110: In which of the following cases, cited as an example by a WP...
Question 111: A U.S. company's website sells widgets. Which of the followi...
Question 112: Which judicial body makes decisions on actions taken by indi...
Question 113: How is the retention of communications traffic data for law ...
Question 114: WP29's "Guidelines on Personal data breach notification unde...