IAPP CIPP-E Practice Test - Questions Answers, Page 26
Question list
List of questions
Related questions
Jerry the Chief Marketing Officer for a sports apparel and trophy company, sells products to schools and athletic clubs globally Recently the company has decided to invest in a new line of customized sports equipment Jerry plans to email his current customer base to offer them a discount on their first purchase of such equipment.
Jerry tells Kate, the Director of Privacy, about his plan. What is the best guidance Kate can provide to Jerry?
Permit Jerry to carry out his plan on the basis of marketing similar products to existing customers.
Require Jerry to send all current customers a second notice to allow them to opt-in to marketing emails
Permit Jerry to carry out his marketing plan on the basis of legitimate interest
Require Jerry to include an option to opt out of marketing emails in the future
A homeowner has installed a motion-detecting surveillance system that films his front doc and entryway. The camera does not film any public areas only areas that are the property of the homeowner. The system has seen declared to the authorities per the homeowner's country law, and a placard indicating the area is being video monitored is visible when entering the property
Why can the homeowner NOT depend on the household exemption with regards to the processing of the video images recorded by the surveillance camera system?
The surveillance camera system can potentially capture biometric information of the homeowner's family, which would be considered a processing of special categories of personal data.
The homeowner has not specified which security measures ore in place as part of the surveillance camera system
The GDPR specifically excludes surveillance camera images from the household exemption
The surveillance camera system can potentially film individuals who enter its filming perimeter
Which of the following is NOT one of the 4 principles developed by the European Al Alliance regarding the ethical use of Artificial Intelligence?
It should be fair.
It should be lawful
It should prevent harm
It should respect human autonomy.
Since blockchain transactions are classified as pseudonymous, are they considered to be within the material scope of the GDPR or outside of it?
Outside the material scope of the GDPR, because transactions do not include personal data about data subjects m the European Union.
Within the material scope of the GDPR but outside of the territorial scope, because blockchains are decentralized.
Within the material scope of the GDPR to the extent that transactions include data subjects in the European Union.
Outside the material scope of the GDPR, because transactions are for personal or household purposes
After detecting an intrusion involving the theft of unencrypted personal data, who shall the breached company notify first under GDPR requirements?
Any parents of children whose personal data was compromised.
Any affected customers whose data was compromised.
A competent supervisory authority.
A local law enforcement agency
What ruling did the Planet 49 CJEU judgment make regarding the issue of pre-ticked boxes?
They are allowed if determined to be technically necessary.
They do not amount to valid consent under any circumstances.
They are allowed if recorded In the register of processing activities.
They constitute valid consent if the processing is necessary for purposes of legitimate interest
Higher fines are assessed for GDPR violations due to which of the following?
Failure to notify a supervisory authority and data subjects of a personal data breach
Violations of a data controller's obligations to obtain a child's consent
Failure to appoint a data protection officer.
Violations of a data subject's rights
A company would like to implement CCTV monitoring in its offices for safety and security purposes. Which of the following would be the best legal basis for the company to rely upon?
Public interest.
Individual consent
Legitimate interest.
Exercise of pubic authority.
According to the GDPR. Article 4(14). biometric data is defined as:
'Personal data resulting from specific technical processing relating to the______charactenstics of a natural person'
Which term could NOT be placed in the above definition?
Psychological.
Physical.
Intellectual.
Behavioral
According to the European Data Protection Board, data subjects should be aware of any video surveillance in operation. How should a retail shop operator ensure that data subjects receive at information required for such a purpose under EU data protection law?
The shop operator should post a copy of the manual of the video surveillance system in the shop and on its social media channels.
The shop operator should provide full notice of the intended video surveillance outside the shop, for example with a sign or a stand-up display.
The shop operator should instruct the data protection officer to hand out a comprehensive notice to data subjects every time they enter the shop.
The shop operator should provide the most important information on a clearly readable warning sign to data subjects before they enter the monitored area, and additional mandatory details by other means.
Question