Privacy Principles (Privacy by Design, Consent, Transparency) CDPSE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What does 'granular consent' mean in the design of consent mechanisms?

   • AUsers can consent to different processing purposes separately.
   • BUsers are asked for consent only once during the initial sign-up.
   • CUsers can only consent to the minimum data processing required by law.
   • DUsers must consent to all processing activities at once.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In a system designed with Privacy by Default, which of the following would be the expected behavior?

   • AThe system shares user data with third parties unless the user opts out.
   • BThe system collects the minimum personal data needed for the service to function.
   • CThe system stores all user data indefinitely for future analysis.
   • DThe system requires users to read and accept a lengthy privacy policy before use.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A multinational corporation is updating its privacy policy to cover its new AI-powered customer service chatbot. The chatbot records conversations to improve its responses. The privacy team is drafting the policy. Which element is essential to include to meet transparency obligations?

   • AA statement that the chatbot uses AI to provide customer service
   • BA detailed description of the chatbot's machine learning algorithms
   • CA clear disclosure that conversations are recorded and used to improve the chatbot, along with the user's rights regarding this data
   • DA promise that the chatbot will not share data with third parties
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A news website is implementing a consent management platform (CMP) to comply with privacy regulations. The CMP is configured to store consent records, including the date, time, and version of the consent notice. A user changes their mind and withdraws consent for analytics cookies. What is the most important action the CMP should take?

   • AImmediately delete all analytics cookies from the user's browser
   • BRecord the withdrawal with a timestamp and ensure that analytics scripts are no longer loaded for that user
   • CNotify the website's data protection officer about the withdrawal
   • DAsk the user to confirm their withdrawal by clicking a link in an email
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What does 'unambiguous consent' mean in the context of privacy regulations?

   • AConsent is obtained verbally over the phone without any record.
   • BConsent is implied by the user's silence or inaction.
   • CConsent is given by the user's continued use of the website.
   • DConsent is given through a clear affirmative action, such as ticking a box.
   Reveal Solution Discussion Select an answer first