<< Prev Question Next Question >>

Question 82/139

SCENARIO
Please use the following to answer the next question:
Brady is a computer programmer based in New Zealand who has been running his own business for two years. Brady's business provides a low-cost suite of services to customers throughout the European Economic Area (EEA). The services are targeted towards new and aspiring small business owners. Brady's company, called Brady Box, provides web page design services, a Social Networking Service (SNS) and consulting services that help people manage their own online stores.
Unfortunately, Brady has been receiving some complaints. A customer named Anna recently uploaded her plans for a new product onto Brady Box's chat area, which is open to public viewing. Although she realized her mistake two weeks later and removed the document, Anna is holding Brady Box responsible for not noticing the error through regular monitoring of the website. Brady believes he should not be held liable.
Another customer, Felipe, was alarmed to discover that his personal information was transferred to a third- party contractor called Hermes Designs and worries that sensitive information regarding his business plans may be misused. Brady does not believe he violated European privacy rules. He provides a privacy notice to all of his customers explicitly stating that personal data may be transferred to specific third parties in fulfillment of a requested service. Felipe says he read the privacy notice but that it was long and complicated Brady continues to insist that Felipe has no need to be concerned, as he can personally vouch for the integrity of Hermes Designs. In fact, Hermes Designs has taken the initiative to create sample customized banner advertisements for customers like Felipe. Brady is happy to provide a link to the example banner ads, now posted on the Hermes Designs webpage. Hermes Designs plans on following up with direct marketing to these customers.
Brady was surprised when another customer, Serge, expressed his dismay that a quotation by him is being used within a graphic collage on Brady Box's home webpage. The quotation is attributed to Serge by first and last name. Brady, however, was not worried about any sort of litigation. He wrote back to Serge to let him know that he found the quotation within Brady Box's Social Networking Service (SNS), as Serge himself had posted the quotation. In his response, Brady did offer to remove the quotation as a courtesy.
Despite some customer complaints, Brady's business is flourishing. He even supplements his income through online behavioral advertising (OBA) via a third-party ad network with whom he has set clearly defined roles.
Brady is pleased that, although some customers are not explicitly aware of the OBA, the advertisements contain useful products and services.
Under the General Data Protection Regulation (GDPR), what is the most likely reason Serge may have grounds to object to the use of his quotation?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (139q)
Question 1: Article 9 of the GDPR lists exceptions to the general prohib...
Question 2: In which scenario is a Controller most likely required to un...
Question 3: Which of the following would MOST likely trigger the extrate...
Question 4: Which of the following is NOT a role of works councils?...
Question 5: A mobile device application that uses cookies will be subjec...
Question 6: Which mechanism, new to the GDPR, now allows for the possibi...
Question 7: Assuming that the "without undue delay" provision is followe...
Question 8: Why is advisable to avoid consent as a legal basis for an em...
Question 9: Plasmology Inc., a Dutch pathology lab, has commenced a proj...
Question 10: Which EU institution is vested with the competence to propos...
Question 11: After leaving the EU under the terms of Brexit, the United K...
Question 12: Pursuant to Article 17 and EDPB Guidelines S'2019 on RTBF cr...
Question 13: Article 29 Working Party has emphasized that the GDPR forbid...
Question 14: What is the key difference between the European Council and ...
Question 15: A grade school is planning to use facial recognition to trac...
Question 16: In relation to third countries and international organizatio...
Question 17: SCENARIO Please use the following to answer the next questio...
Question 18: What must be included in a written agreement between the con...
Question 19: Under Article 58 of the GDPR, which of the following describ...
Question 20: SCENARIO Please use the following to answer the next questio...
Question 21: SCENARIO Please use the following to answer the next questio...
Question 22: SCENARIO Please use the following to answer the next questio...
Question 23: The transparency principle is most directly related to which...
Question 24: Which of the following would most likely NOT be covered by t...
Question 25: SCENARIO Please use the following to answer the next questio...
Question 26: An online company's privacy practices vary due to the fact t...
Question 27: Start-up company MagicAI is developing an AI system that wil...
Question 28: Please select4 of the 7 options below. No partial credit wil...
Question 29: Which of the following demonstrates compliance with the acco...
Question 30: In which case would a controller who has undertaken a DPIA m...
Question 31: SCENARIO Please use the following to answer the next questio...
Question 32: What are the obligations of a processor that engages a sub-p...
Question 33: In which of the following cases, cited as an example by a WP...
Question 34: What is the consequence if a processor makes an independent ...
Question 35: What is the main task of the European Data Protection Board?...
Question 36: SCENARIO Please use the following to answer the next questio...
Question 37: Which of the following is NOT considered a fair processing p...
Question 38: Select the answer below that accurately completes the follow...
Question 39: SCENARIO Please use the following to answer the next questio...
Question 40: If two controllers act as joint controllers pursuant to Arti...
Question 41: SCENARIO Please use the following to answer the next questio...
Question 42: Which aspect of processing does the GDPR allow processors to...
Question 43: Many businesses print their employees' photographs on buildi...
Question 44: What is the MAIN reason GDPR Article 4(22) establishes the c...
Question 45: Which change was introduced by the 2009 amendments to the e-...
Question 46: Which of the following is NOT recognized as a common charact...
Question 47: What is the main purpose of the EU Data Act?...
Question 48: All of the following will be established by the second Netwo...
Question 49: Which of the following elements does NOT need to be presente...
Question 50: In its Guidelines 01/2021 on Examples regarding Personal Dat...
Question 51: You are the new Data Protection Officer for your company and...
Question 52: Since blockchain transactions are classified as pseudonymous...
Question 53: According to the EDPB Guidelines 01/2021 on Examples regardi...
Question 54: What is an important difference between the European Court o...
Question 55: When hiring a data processor, which action would a data cont...
Question 56: As a result of the European Court of Justice's ruling in the...
Question 57: SCENARIO Please use the following to answer the next questio...
Question 58: SCENARIO Please use the following to answer the next questio...
Question 59: In the Planet 49 case, what was the man judgement of the Coo...
Question 60: SCENARIO Please use the following to answer the next questio...
Question 61: Pursuant to Article 4(5) of the GDPR, data is considered "ps...
Question 62: A company wishes to transfer personal data to a country outs...
Question 63: SCENARIO Please use the following to answer the next questio...
Question 64: Which aspect of the GDPR will likely have the most impact on...
Question 65: In which situation would a data controller most likely be ab...
Question 66: Tanya is the Data Protection Officer for Curtains Inc., a GD...
Question 67: If a multi-national company wanted to conduct background che...
Question 68: Which of the following is one of the supervisory authority's...
Question 69: To which of the following parties does the territorial scope...
Question 70: What monitoring may lawfully be performed within the scope o...
Question 71: In which of the following cases would an organization MOST L...
Question 72: Which of the following is the weakest lawful basis for proce...
Question 73: Which kind of privacy notice, originally advocated by the Ar...
Question 74: SCENARIO Please use the following to answer the next questio...
Question 75: Through a combination of hardware failure and human error, t...
Question 76: SCENARIO Please use the following to answer the next questio...
Question 77: SCENARIO Please use the following to answer the next questio...
Question 78: SCENARIO Please use the following to answer the next questio...
Question 79: SCENARIO Please use the following to answer the next questio...
Question 80: SCENARIO Please use the following to answer the next questio...
Question 81: When collecting personal data in a European Union (EU) membe...
Question 82: SCENARIO Please use the following to answer the next questio...
Question 83: Under what circumstances might the "soft opt-in" rule apply ...
Question 84: There are three domains of security covered by Article 32 of...
Question 85: What was the aim of the European Data Protection Directive 9...
Question 86: You have just been hired by a toy manufacturer based in Hong...
Question 87: In the EDPB's Guidelines 4/2019 on Article 25 Data Protectio...
Question 88: SCENARIO - Please use the following to answer the next quest...
Question 89: When does the GDPR provide more latitude for a company to pr...
Question 90: When is data sharing agreement MOST likely to be needed?...
Question 91: Please use the following to answer the next question: Wonder...
Question 92: SCENARIO Please use the following to answer the next questio...
Question 93: SCENARIO Please use the following to answer the next questio...
Question 94: According to the GDPR, when should the processing of photogr...
Question 95: A multinational company is appointing a mandatory data prote...
Question 96: Under Article 30 of the GDPR, controllers are required to ke...
Question 97: Article 5(1)(b) of the GDPR states that personal data must b...
Question 98: An employee of company ABCD has just noticed a memory stick ...
Question 99: SCENARIO Please use the following to answer the next questio...
Question 100: Which mechanism, introduced by the GDPR as a means of ensuri...
Question 101: SCENARIO Please use the following to answer the next questio...
Question 102: SCENARIO Please use the following to answer the next questio...
Question 103: With the issue of consent, the GDPR allows member states som...
Question 104: What is the most frequently used mechanism for legitimizing ...
Question 105: Scenario Recap: WeScanYou provides diagnostic tools (Scan4Yo...
Question 106: Which statement provides an accurate description of a direct...
Question 107: Start-up company MagicAl is developing an AI system that wil...
Question 108: SCENARIO Please use the following to answer the next questio...
Question 109: According to the E-Commerce Directive 2000/31/EC, where is t...
Question 110: MagicClean is a web-based service located in the United Stat...
Question 111: Under the Data Protection Law Enforcement Directive of the E...
Question 112: Jerry the Chief Marketing Officer for a sports apparel and t...
Question 113: Once an organization has conducted an internal investigation...
Question 114: The Universal Declaration of Human Rights (1948) connects th...
Question 115: An unforeseen power outage results in company Z's lack of ac...
Question 116: In addition to the European Commission, who can adopt standa...
Question 117: Since blockchain transactions are classified as pseudonymous...
Question 118: The origin of privacy as a fundamental human right can be fo...
Question 119: Which of the following is NOT an explicit right granted to d...
Question 120: In the event of a data breach, which type of information are...
Question 121: Under the GDPR, who would be LEAST likely to be allowed to e...
Question 122: Which failing of Privacy Shield, cited by the CJEU as a reas...
Question 123: Under Article 21 of the GDPR, a controller must stop profili...
Question 124: According to Art 23 GDPR, which of the following data subjec...
Question 125: When assessing the level of risk created by a data breach, w...
Question 126: Which GDPR principle would a Spanish employer most likely de...
Question 127: Which of the following does NOT have to be included in the r...
Question 128: Bioface is a company based in the United States. It has no s...
Question 129: What ruling did the Planet 49 CJEU judgment make regarding t...
Question 130: An entity's website stores text files on EU users' computer ...
Question 131: Under the GDPR, which of the following is true in regard to ...
Question 132: Sanctions for non-compliance with the EU Artificial Intellig...
Question 133: In which of the following situations would an individual mos...
Question 134: What permissions are required for a marketer to send an emai...
Question 135: SCENARIO Please use the following to answer the next questio...
Question 136: According to the GDPR. Article 4(14). biometric data is defi...
Question 137: Which of the following describes a mandatory requirement for...
Question 138: Rental Market Champions (RMC) is a real estate agency, provi...
Question 139: Which GDPR requirement will present the most significant cha...