Exam CIPP-E topic 1 question 42 discussion

Actual exam question from IAPP's CIPP-E

Question #: 42
Topic #: 1

A U.S.-based online shop uses sophisticated software to track the browsing behavior of its European customers and predict future purchases. It also shares this information with third parties. Under the GDPR, what is the online shop’s PRIMARY obligation while engaging in this kind of profiling?

A. It must solicit informed consent through a notice on its website
B. It must seek authorization from the European supervisory authorities
C. It must be able to demonstrate a prior business relationship with the customers
D. It must prove that it uses sufficient security safeguards to protect customer data

Show Suggested Answer

Suggested Answer: A 🗳️

by mummifier2023 at Sept. 30, 2023, 8:43 p.m.

Comments

Submit Cancel

Ssourav

11 months, 3 weeks ago

Selected Answer: A

A. It must solicit informed consent through a notice on its website GDPR Article Reference: Article 22(1): The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. Article 22(2): This shall not apply if the decision is based on the data subject’s explicit consent, among other exceptions. Article 7: Conditions for consent – Consent must be informed, specific, and unambiguous, and data subjects must be provided with clear information about the processing activities, including profiling and the sharing of their data with third parties.

upvoted 3 times

...

mummifier2023

1 year, 9 months ago

must be able to demonstrate preview relations with the customer to be able to use Legitimate interest as a legal basis.

upvoted 1 times

loejee

1 year, 8 months ago

that is not a requirement. the correct answer is A

upvoted 3 times

...