Privacy Principles (Privacy by Design, Consent, Transparency) CDPSE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A financial services firm is updating its customer onboarding process. The legal team has drafted a consent form that is a single block of text explaining all data uses, including credit scoring, marketing, and sharing with affiliates. The customer must click 'I Agree' to open an account. A privacy consultant reviews the form. Which requirement for valid consent is most clearly violated?

   • AConsent must be freely given
   • BConsent must be specific
   • CConsent must be informed
   • DConsent must be unambiguous
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   When drafting a privacy policy, which of the following is a key requirement?

   • AUse technical terms to demonstrate expertise
   • BInclude all possible legal disclaimers to protect the organization
   • CUse plain language that is easy for the average user to understand
   • DKeep the policy as short as possible, even if it omits required details
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is an example of user-centric design in the context of Privacy by Design?

   • AProviding users with clear and accessible privacy controls
   • BRequiring users to contact customer support to change privacy settings
   • CCollecting as much data as possible to personalize the user experience
   • DHiding privacy settings in a complex menu to reduce user complaints
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of a privacy notice under transparency obligations?

   • ATo provide a marketing opportunity to promote the organization's services
   • BTo document internal data processing procedures for auditors only
   • CTo inform data subjects about how their personal data is collected, used, and shared
   • DTo serve as a legal contract between the organization and the data subject
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A human resources department of a large corporation wants to use employee data for a new wellness program. The program will collect health data, such as steps and sleep patterns, via a company-provided fitness tracker. The HR director proposes to make participation mandatory for all employees. A privacy analyst is asked to review this plan. Which condition of valid consent is most directly compromised?

   • AFreely given
   • BSpecific
   • CInformed
   • DUnambiguous
   Reveal Solution Discussion Select an answer first