Valid CIPP-E Dumps shared by ExamDiscuss.com for Helping Passing CIPP-E Exam! ExamDiscuss.com now offer the newest CIPP-E exam dumps, the ExamDiscuss.com CIPP-E exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com CIPP-E dumps with Test Engine here:

Access CIPP-E Dumps Premium Version
(298 Q&As Dumps, 35%OFF Special Discount Code: freecram)

<< Prev Question Next Question >>

Question 37/114

SCENARIO
Please use the following to answer the next question:
TripBliss Inc. is a travel service company which has lost substantial revenue over the last few years. Their new manager, Oliver, suspects that this is partly due to the company's outdated website. After doing some research, he meets with a sales representative from the up-and-coming IT company Techiva, hoping that they can design a new, cutting-edge website for TripBliss Inc.'s foundering business.
During negotiations, a Techiva representative describes a plan for gathering more customer information through detailed Questionaires, which could be used to tailor their preferences to specific travel destinations. TripBliss Inc. can choose any number of data categories - age, income, ethnicity - that would help them best accomplish their goals. Oliver loves this idea, but would also like to have some way of gauging how successful this approach is, especially since the Questionaires will require customers to provide explicit consent to having their data collected. The Techiva representative suggests that they also run a program to analyze the new website's traffic, in order to get a better understanding of how customers are using it. He explains his plan to place a number of cookies on customer devices. The cookies will allow the company to collect IP addresses and other information, such as the sites from which the customers came, how much time they spend on the TripBliss Inc. website, and which pages on the site they visit. All of this information will be compiled in log files, which Techiva will analyze by means of a special program. TripBliss Inc. would receive aggregate statistics to help them evaluate the website's effectiveness. Oliver enthusiastically engages Techiva for these services.
Techiva assigns the analytics portion of the project to longtime account manager Leon Santos. As is standard practice, Leon is given administrator rights to TripBliss Inc.'s website, and can authorize access to the log files gathered from it. Unfortunately for TripBliss Inc., however, Leon is taking on this new project at a time when his dissatisfaction with Techiva is at a high point. In order to take revenge for what he feels has been unfair treatment at the hands of the company, Leon asks his friend Fred, a hobby hacker, for help. Together they come up with the following plan: Fred will hack into Techiva's system and copy their log files onto a USB stick. Despite his initial intention to send the USB to the press and to the data protection authority in order to denounce Techiva, Leon experiences a crisis of conscience and ends up reconsidering his plan. He decides instead to securely wipe all the data from the USB stick and inform his manager that the company's system of access control must be reconsidered.
With regard to TripBliss Inc.'s use of website cookies, which of the following statements is correct?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (114q)
Question 1: According to the GDPR, what is the main task of a Data Prote...
Question 2: The GDPR forbids the practice of "forum shopping", which occ...
Question 3: Which of the following is NOT an explicit right granted to d...
Question 4: SCENARIO Please use the following to answer the next questio...
Question 5: If a company chooses to ground an international data transfe...
Question 6: How is the GDPR's position on consent MOST likely to affect ...
Question 7: SCENARIO Please use the following to answer the next questio...
Question 8: SCENARIO Please use the following to answer the next questio...
Question 9: Which of the following would NOT be relevant when determinin...
Question 10: SCENARIO Please use the following to answer the next questio...
Question 11: In which case would a controller who has undertaken a DPIA m...
Question 12: Which of the following would require designating a data prot...
Question 13: An entity's website stores text files on EU users' computer ...
Question 14: The European Parliament jointly exercises legislative and bu...
Question 15: When assessing the level of risk created by a data breach, w...
Question 16: SCENARIO Please use the following to answer the next questio...
Question 17: Pursuant to Article 17 and EDPB Guidelines S'2019 on RTBF cr...
Question 18: When may browser settings be relied upon for the lawful appl...
Question 19: Which of the following is NOT recognized as being a common c...
Question 20: SCENARIO Please use the following to answer the next questio...
Question 21: According to Article 14 of the GDPR, how long does a control...
Question 22: SCENARIO Please use the following to answer the next questio...
Question 23: In addition to the European Commission, who can adopt standa...
Question 24: What must be included in a written agreement between the con...
Question 25: Under which of the following conditions does the General Dat...
Question 26: After leaving the EU under the terms of Brexit, the United K...
Question 27: SCENARIO Please use the following to answer the next questio...
Question 28: What is the consequence if a processor makes an independent ...
Question 29: In the Planet 49 case, what was the man judgement of the Coo...
Question 30: SCENARIO Please use the following to answer the next questio...
Question 31: Based on GDPR Article 35, which of the following situations ...
Question 32: Under the GDPR, where personal data is not obtained directly...
Question 33: If a multi-national company wanted to conduct background che...
Question 34: Which of the following Convention 108+ principles, as amende...
Question 35: SCENARIO Please use the following to answer the next questio...
Question 36: What type of data lies beyond the scope of the General Data ...
Question 37: SCENARIO Please use the following to answer the next questio...
Question 38: Which aspect of the GDPR will likely have the most impact on...
Question 39: A company in France suffers a robbery over the weekend owing...
Question 40: Which of the following was the first legally binding interna...
Question 41: Articles 13 and 14 of the GDPR provide details on the obliga...
Question 42: A data controller appoints a data protection officer. Which ...
Question 43: What is the main task of the European Data Protection Board?...
Question 44: According to Article 84 of the GDPR, the rules on penalties ...
Question 45: SCENARIO Please use the following to answer the next questio...
Question 46: SCENARIO Please use the following to answer the next questio...
Question 47: Which of the following entities would most likely be exempt ...
Question 48: In the event of a data breach, which type of information are...
Question 49: Which GDPR requirement will present the most significant cha...
Question 50: As a result of the European Court of Justice's ruling in the...
Question 51: Two companies, Gellcoat and Freifish, make plans to launch a...
Question 52: Which marketing-related activity is least likely to be cover...
Question 53: According to the GDPR, how is pseudonymous personal data def...
Question 54: Under Article 80(1) of the GDPR, individuals can elect to be...
Question 55: SCENARIO Please use the following to answer the next questio...
Question 56: According to the European Data Protection Board, which of th...
Question 57: SCENARIO Please use the following to answer the next questio...
Question 58: SCENARIO Please use the following to answer the next questio...
Question 59: Which of the following does NOT have to be included in the r...
Question 60: According to the GDPR, when should the processing of photogr...
Question 61: A U.S.-based online shop uses sophisticated software to trac...
Question 62: SCENARIO Please use the following to answer the next questio...
Question 63: Which EU institution is vested with the competence to propos...
Question 64: If two controllers act as joint controllers pursuant to Arti...
Question 65: SCENARIO Please use the following to answer the next questio...
Question 66: To provide evidence of GDPR compliance, a company performs a...
Question 67: A company would like to implement CCTV monitoring in its off...
Question 68: What permissions are required for a marketer to send an emai...
Question 69: Which of the following is an example of direct marketing tha...
Question 70: A company is hesitating between Binding Corporate Rules and ...
Question 71: SCENARIO Please use the following to answer the next questio...
Question 72: SCENARIO Please use the following to answer the next questio...
Question 73: Which type of personal data does the GDPR define as a "speci...
Question 74: What was the aim of the European Data Protection Directive 9...
Question 75: Which of the following would most likely NOT be covered by t...
Question 76: What was the main failing of Convention 108 that led to the ...
Question 77: Under the GDPR, which of the following is true in regard to ...
Question 78: To which of the following parties does the territorial scope...
Question 79: According to the European Data Protection Board, data subjec...
Question 80: When does the GDPR provide more latitude for a company to pr...
Question 81: When hiring a data processor, which action would a data cont...
Question 82: Which of the following would MOST likely trigger the extrate...
Question 83: SCENARIO Please use the following to answer the next questio...
Question 84: A grade school is planning to use facial recognition to trac...
Question 85: SCENARIO Please use the following to answer the next questio...
Question 86: SCENARIO Please use the following to answer the next questio...
Question 87: Higher fines are assessed for GDPR violations due to which o...
Question 88: Which area of privacy is a lead supervisory authority's (LSA...
Question 89: Read the following steps: Discover which employees are acces...
Question 90: If a French controller has a car-sharing app available only ...
Question 91: Which of the following is the weakest lawful basis for proce...
Question 92: An online company's privacy practices vary due to the fact t...
Question 93: Which sentence BEST summarizes the concepts of "fairness," "...
Question 94: When collecting personal data in a European Union (EU) membe...
Question 95: SCENARIO Please use the following to answer the next questio...
Question 96: SCENARIO Please use the following to answer the next questio...
Question 97: A key component of the OECD Guidelines is the "Individual Pa...
Question 98: Under what circumstances might the "soft opt-in" rule apply ...
Question 99: Which of the following is NOT exempt from the material scope...
Question 100: What is an important difference between the European Court o...
Question 101: What are the obligations of a processor that engages a sub-p...
Question 102: Which kind of privacy notice, originally advocated by the Ar...
Question 103: Which of the following countries will continue to enjoy adeq...
Question 104: Which mechanism, new to the GDPR, now allows for the possibi...
Question 105: Bioface is a company based in the United States. It has no s...
Question 106: SCENARIO Please use the following to answer the next questio...
Question 107: A news website based m (he United Slates reports primarily o...
Question 108: According to the E-Commerce Directive 2000/31/EC, where is t...
Question 109: What term BEST describes the European model for data protect...
Question 110: In which of the following cases, cited as an example by a WP...
Question 111: A U.S. company's website sells widgets. Which of the followi...
Question 112: Which judicial body makes decisions on actions taken by indi...
Question 113: How is the retention of communications traffic data for law ...
Question 114: WP29's "Guidelines on Personal data breach notification unde...