IAPP Exam CIPP/C Topic 5 Question 39 Discussion

Actual exam question for IAPP's CIPP/C exam

Question #: 39
Topic #: 5

A boutique hotel in Montreal seeks to attract travelers from Europe but wants to avoid becoming subject to the GDPR's requirements. Which of the following activities is most likely to result in a finding that the hotel is subject to the GDPR?

APlacing advertisements on travel websites accessible in Europe.

BCollecting contact information for foreign business leaders from public directories.

CSending discount offers to guests who previously registered using a foreign address.

DTranslating the hotel's registration page into German based on the visitor's IP address.

Show Suggested Answer

Suggested Answer: B

by Taryn at Mar 19, 2024, 06:03 AM

Limited Time Offer

25%

Off

Get Premium CIPP/C Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nickolas

4 days ago

This question is really testing our understanding of the GDPR's territorial scope. I'll need to analyze each option carefully to determine which one is most likely to bring the hotel under the GDPR's requirements.

upvoted 0 times

...

Mozelle

10 days ago

Hmm, this is a tricky one. There are a few different approaches outlined, and I'm not sure which one is the "best." I'm leaning towards option D - defining the target architecture first to avoid carrying forward the current problems. But I'd need to think it through a bit more.

upvoted 0 times

...

Gearldine

17 days ago

This is a tricky one, but I think fire protection and safety is definitely a component of physical infrastructure. I'll mark False.

upvoted 0 times

...

Laurel

18 days ago

Okay, let's see. I'm pretty sure the property is set to true, so that's not the issue. Maybe it has something to do with remote JMX functionality being disabled by default?

upvoted 0 times

...

Mari

19 days ago

This looks like a classic Cisco SAN topology design question. I think the key is to focus on the requirements - limited budget, need for resource sharing, and plans for future expansion. The high availability requirement is also important.

upvoted 0 times

...

Sharita

5 months ago

I'm going with option A. Placing ads on European travel websites? That's like waving a big 'GDPR, come get me!' flag. The hotel might as well just roll out the red carpet for the data protection authorities.

upvoted 0 times

...

Audrie

5 months ago

Option B is the way to go! Collecting public data from business directories? That's a totally legit way to get those European travelers without having to worry about the GDPR. Genius!

upvoted 0 times

Kami

4 months ago

Definitely! It's a clever way to target a specific audience without having to worry about compliance issues.

upvoted 0 times

...

Salome

4 months ago

That's a smart move! It's a great way to reach out to European travelers without getting caught up in GDPR.

upvoted 0 times

...

Anjelica

4 months ago

B) Collecting contact information for foreign business leaders from public directories.

upvoted 0 times

...

Ricki

5 months ago

Haha, imagine the hotel trying to avoid the GDPR by just not translating their website. 'Sorry, you can't book here if you don't speak English!' That's not going to work, guys.

upvoted 0 times

Mireya

4 months ago

C: Sending discount offers to guests who previously registered using a foreign address.

upvoted 0 times

...

Lizette

5 months ago

B: Collecting contact information for foreign business leaders from public directories.

upvoted 0 times

...

Salina

5 months ago

A: Placing advertisements on travel websites accessible in Europe.

upvoted 0 times

...

Alva

6 months ago

I'm not sure, but option C looks a bit sketchy to me. Sending discount offers to guests with foreign addresses could be seen as a way to specifically target Europeans, which could trigger GDPR compliance.

upvoted 0 times

Ricki

4 months ago

D) Translating the hotel's registration page into German based on the visitor's IP address.

upvoted 0 times

...

Elmira

4 months ago

I agree, option C does seem like it could raise some red flags.

upvoted 0 times

...

Paz

4 months ago

C) Sending discount offers to guests who previously registered using a foreign address.

upvoted 0 times

...

Cherry

4 months ago

B) Collecting contact information for foreign business leaders from public directories.

upvoted 0 times

...

Antione

5 months ago

A) Placing advertisements on travel websites accessible in Europe.

upvoted 0 times

...

Rupert

5 months ago

B: Yeah, targeting guests with foreign addresses might make the hotel subject to GDPR.

upvoted 0 times

...

Portia

5 months ago

A: I think option C could definitely raise some red flags.

upvoted 0 times

...

Jacqueline

6 months ago

Option D seems like the obvious choice here. Translating the website based on the visitor's IP address is a clear indication that the hotel is targeting European travelers and is likely to fall under the GDPR's jurisdiction.

upvoted 0 times

...