<< Prev Question Next Question >>

Question 127/134

SCENARIO
Please use the following to answer the next question:
Brady is a computer programmer based in New Zealand who has been running his own business for two years. Brady's business provides a low-cost suite of services to customers throughout the European Economic Area (EEA). The services are targeted towards new and aspiring small business owners. Brady's company, called Brady Box, provides web page design services, a Social Networking Service (SNS) and consulting services that help people manage their own online stores.
Unfortunately, Brady has been receiving some complaints. A customer named Anna recently uploaded her plans for a new product onto Brady Box's chat area, which is open to public viewing. Although she realized her mistake two weeks later and removed the document, Anna is holding Brady Box responsible for not noticing the error through regular monitoring of the website. Brady believes he should not be held liable.
Another customer, Felipe, was alarmed to discover that his personal information was transferred to a third- party contractor called Hermes Designs and worries that sensitive information regarding his business plans may be misused. Brady does not believe he violated European privacy rules. He provides a privacy notice to all of his customers explicitly stating that personal data may be transferred to specific third parties in fulfillment of a requested service. Felipe says he read the privacy notice but that it was long and complicated Brady continues to insist that Felipe has no need to be concerned, as he can personally vouch for the integrity of Hermes Designs. In fact, Hermes Designs has taken the initiative to create sample customized banner advertisements for customers like Felipe. Brady is happy to provide a link to the example banner ads, now posted on the Hermes Designs webpage. Hermes Designs plans on following up with direct marketing to these customers.
Brady was surprised when another customer, Serge, expressed his dismay that a quotation by him is being used within a graphic collage on Brady Box's home webpage. The quotation is attributed to Serge by first and last name. Brady, however, was not worried about any sort of litigation. He wrote back to Serge to let him know that he found the quotation within Brady Box's Social Networking Service (SNS), as Serge himself had posted the quotation. In his response, Brady did offer to remove the quotation as a courtesy.
Despite some customer complaints, Brady's business is flourishing. He even supplements his income through online behavioral advertising (OBA) via a third-party ad network with whom he has set clearly defined roles. Brady is pleased that, although some customers are not explicitly aware of the OBA, the advertisements contain useful products and services.
Based on current trends in European privacy practices, which aspect of Brady Box' Online Behavioral Advertising (OBA) is most likely to be insufficient if the company becomes established in Europe?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (134q)
Question 1: Please use the following to answer the next question: Wonder...
Question 2: SCENARIO Please use the following to answer the next questio...
Question 3: What is the key difference between the European Council and ...
Question 4: The GDPR forbids the practice of "forum shopping", which occ...
Question 5: Start-up company MagicAI is developing an AI system that wil...
Question 6: SCENARIO Please use the following to answer the next questio...
Question 7: In relation to third countries and international organizatio...
Question 8: An entity's website stores text files on EU users' computer ...
Question 9: SCENARIO Please use the following to answer the next questio...
Question 10: SCENARIO Please use the following to answer the next questio...
Question 11: What is a reason the European Court of Justice declared the ...
Question 12: With the issue of consent, the GDPR allows member states som...
Question 13: SCENARIO Please use the following to answer the next questio...
Question 14: SCENARIO Please use the following to answer the next questio...
Question 15: SCENARIO Please use the following to answer the next questio...
Question 16: All of the following will be established by the second Netwo...
Question 17: If a company chooses to ground an international data transfe...
Question 18: When may browser settings be relied upon for the lawful appl...
Question 19: A news website based m (he United Slates reports primarily o...
Question 20: A company wishes to transfer personal data to a country outs...
Question 21: A mobile device application that uses cookies will be subjec...
Question 22: SCENARIO Please use the following to answer the next questio...
Question 23: According to the European Data Protection Board, if a contro...
Question 24: Which of the following is NOT one of the 4 principles develo...
Question 25: Article 58 of the GDPR describes the power of supervisory au...
Question 26: For which of the following operations would an employer most...
Question 27: In the Planet 49 case, what was the man judgement of the Coo...
Question 28: Which of the following countries will continue to enjoy adeq...
Question 29: SCENARIO Please use the following to answer the next questio...
Question 30: Under the Data Protection Law Enforcement Directive of the E...
Question 31: Under the GDPR, where personal data is not obtained directly...
Question 32: SCENARIO Please use the following to answer the next questio...
Question 33: SCENARIO Please use the following to answer the next questio...
Question 34: Which of the following would most likely NOT be covered by t...
Question 35: Which of the following is NOT considered a fair processing p...
Question 36: Which of the following describes a mandatory requirement for...
Question 37: According to the Personal Data Protection Commission's (PDPC...
Question 38: Through a combination of hardware failure and human error, t...
Question 39: To receive a preliminary interpretation on provisions of the...
Question 40: SCENARIO Please use the following to answer the next questio...
Question 41: What is one major goal that the OECD Guidelines, Convention ...
Question 42: Which of the following is NOT an explicit right granted to d...
Question 43: SCENARIO Please use the following to answer the next questio...
Question 44: What is the consequence if a processor makes an independent ...
Question 45: Under Article 9 of the GDPR, which of the following categori...
Question 46: Articles 13 and 14 of the GDPR provide details on the obliga...
Question 47: SCENARIO Please use the following to answer the next questio...
Question 48: What is the primary purpose of Convention 108+, which amends...
Question 49: Which kind of privacy notice, originally advocated by the Ar...
Question 50: SCENARIO Please use the following to answer the next questio...
Question 51: Under the GDPR, which of the following is true in regard to ...
Question 52: SCENARIO Please use the following to answer the next questio...
Question 53: Which of the following entities would most likely be exempt ...
Question 54: Which GDPR principle would a Spanish employer most likely de...
Question 55: When collecting personal data in a European Union (EU) membe...
Question 56: A grade school is planning to use facial recognition to trac...
Question 57: An organization conducts body temperature checks as a part o...
Question 58: SCENARIO Please use the following to answer the next questio...
Question 59: SCENARIO Please use the following to answer the next questio...
Question 60: In which case would a controller who has undertaken a DPIA m...
Question 61: How can the relationship between the GDPR and the Digital Se...
Question 62: SCENARIO Please use the following to answer the next questio...
Question 63: An organization receives a request multiple times from a dat...
Question 64: A German data subject was the victim of an embarrassing pran...
Question 65: Once an organization has conducted an internal investigation...
Question 66: Which statement is correct when considering the right to pri...
Question 67: Which statement provides an accurate description of a direct...
Question 68: SCENARIO Please use the following to answer the next questio...
Question 69: Which of the following is NOT exempt from the material scope...
Question 70: Jerry the Chief Marketing Officer for a sports apparel and t...
Question 71: According to the GDPR. Article 4(14). biometric data is defi...
Question 72: The EDPB's Guidelines 8/2020 on the targeting of social medi...
Question 73: SCENARIO Please use the following to answer the next questio...
Question 74: SCENARIO Please use the following to answer the next questio...
Question 75: According to the E-Commerce Directive 2000/31/EC, where is t...
Question 76: Which of the following does NOT have to be included in the r...
Question 77: Which of the following is NOT recognized as a common charact...
Question 78: Which of the following is NOT recognized as being a common c...
Question 79: In the Planet 49 case, what was the main judgement of the Co...
Question 80: Which judicial body makes decisions on actions taken by indi...
Question 81: If a data subject puts a complaint before a DPA and receives...
Question 82: The GDPR requires controllers to supply data subjects with d...
Question 83: SCENARIO Please use the following to answer the next questio...
Question 84: SCENARIO Please use the following to answer the next questio...
Question 85: Tanya is the Data Protection Officer for Curtains Inc., a GD...
Question 86: According to the GDPR, how is pseudonymous personal data def...
Question 87: A private company has establishments in France, Poland, the ...
Question 88: The origin of privacy as a fundamental human right can be fo...
Question 89: SCENARIO Please use the following to answer the next questio...
Question 90: SCENARIO Please use the following to answer the next questio...
Question 91: The European Data Protection Board (EDPB) recommends measure...
Question 92: Which mechanism, introduced by the GDPR as a means of ensuri...
Question 93: SCENARIO Please use the following to answer the next questio...
Question 94: SCENARIO Please use the following to answer the next questio...
Question 95: What was the main failing of Convention 108 that led to the ...
Question 96: Read the following steps: Discover which employees are acces...
Question 97: To comply with the GDPR and the EU Court of Justice's decisi...
Question 98: SCENARIO Please use the following to answer the next questio...
Question 99: With respect to international transfers of personal data, th...
Question 100: When does the GDPR provide more latitude for a company to pr...
Question 101: SCENARIO Please use the following to answer the next questio...
Question 102: According to the GDPR, what is the main task of a Data Prote...
Question 103: SCENARIO Please use the following to answer the next questio...
Question 104: Which GDPR requirement will present the most significant cha...
Question 105: Which area of privacy is a lead supervisory authority's (LSA...
Question 106: Under Article 21 of the GDPR, a controller must stop profili...
Question 107: Since blockchain transactions are classified as pseudonymous...
Question 108: Which of the following is one of the supervisory authority's...
Question 109: Which of the following is an example of direct marketing tha...
Question 110: If a company is planning to use closed-circuit television (C...
Question 111: It a company receives an anonymous email demanding ransom fo...
Question 112: Which of the following is an accurate statement regarding th...
Question 113: What is an important difference between the European Court o...
Question 114: Pursuant to the EDPB Guidelines 8/2022, all of the following...
Question 115: SCENARIO Please use the following to answer the next questio...
Question 116: As per the GDPR, which legal basis would be the most appropr...
Question 117: SCENARIO Please use the following to answer the next questio...
Question 118: SCENARIO Please use the following to answer the next questio...
Question 119: Under Article 80(1) of the GDPR, individuals can elect to be...
Question 120: Which of the following would NOT be relevant when determinin...
Question 121: Bioface is a company based in the United States. It has no s...
Question 122: A homeowner has installed a motion-detecting surveillance sy...
Question 123: Why is advisable to avoid consent as a legal basis for an em...
Question 124: Which of the following demonstrates compliance with the acco...
Question 125: SCENARIO Please use the following to answer the next questio...
Question 126: There are three domains of security covered by Article 32 of...
Question 127: SCENARIO Please use the following to answer the next questio...
Question 128: Which change was introduced by the 2009 amendments to the e-...
Question 129: Which of the following regulates the use of electronic commu...
Question 130: SCENARIO Please use the following to answer the next questio...
Question 131: Which of the following would require designating a data prot...
Question 132: Which of the following would MOST likely trigger the extrate...
Question 133: How is the retention of communications traffic data for law ...
Question 134: According to Article 84 of the GDPR, the rules on penalties ...