IAPP CIPP/C Exam - Topic 5 Question 39 Discussion

Actual exam question for IAPP's CIPP/C exam

Question #: 39
Topic #: 5

A boutique hotel in Montreal seeks to attract travelers from Europe but wants to avoid becoming subject to the GDPR's requirements. Which of the following activities is most likely to result in a finding that the hotel is subject to the GDPR?

APlacing advertisements on travel websites accessible in Europe.

BCollecting contact information for foreign business leaders from public directories.

CSending discount offers to guests who previously registered using a foreign address.

DTranslating the hotel's registration page into German based on the visitor's IP address.

Show Suggested Answer

Suggested Answer: B

by Taryn at Mar 19, 2024, 06:03 AM

Limited Time Offer

25%

Off

Get Premium CIPP/C Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Noble

4 months ago

Just placing ads shouldn't make them subject to GDPR, right?

upvoted 0 times

...

Ruthann

4 months ago

I disagree, B seems harmless enough.

upvoted 0 times

...

Mable

4 months ago

Wait, translating the page based on IP? That seems sketchy!

upvoted 0 times

...

Maryann

4 months ago

I think C is the most likely to trigger GDPR rules.

upvoted 0 times

...

Valentine

4 months ago

A is definitely a big red flag for GDPR.

upvoted 0 times

...

Flo

5 months ago

Translating the registration page based on IP address sounds like it could lead to GDPR issues too, but I can't recall if that's a definitive factor.

upvoted 0 times

...

Bettyann

5 months ago

I think sending discount offers to guests who registered with a foreign address could definitely bring them under GDPR, so maybe C is the right choice.

upvoted 0 times

...

Maryann

5 months ago

I'm not entirely sure, but I feel like collecting contact info from public directories shouldn't make them subject to GDPR.

upvoted 0 times

...

Maia

5 months ago

I remember discussing how advertising in Europe could trigger GDPR compliance, so I think option A might be the answer.

upvoted 0 times

...

Yen

5 months ago

I've got a good feeling about this one. The key is to identify the activity that most directly targets or collects data from European travelers. I think I've got the right approach here.

upvoted 0 times

...

Annita

5 months ago

Okay, let me think this through. I know the GDPR applies to the processing of personal data of EU residents, so I'll need to focus on which of these activities would likely involve that.

upvoted 0 times

...

Eileen

5 months ago

Hmm, I'm a bit unsure about this one. The GDPR can be complex, and I want to make sure I understand the nuances here before selecting an answer.

upvoted 0 times

...

Paul

5 months ago

This seems like a tricky question about the GDPR and how it might apply to a hotel's marketing activities. I'll need to carefully consider the details of each option.

upvoted 0 times

...

Nickolas

5 months ago

This question is really testing our understanding of the GDPR's territorial scope. I'll need to analyze each option carefully to determine which one is most likely to bring the hotel under the GDPR's requirements.

upvoted 0 times

...

Mari

6 months ago

This looks like a classic Cisco SAN topology design question. I think the key is to focus on the requirements - limited budget, need for resource sharing, and plans for future expansion. The high availability requirement is also important.

upvoted 0 times

...

Mozelle

6 months ago

Hmm, this is a tricky one. There are a few different approaches outlined, and I'm not sure which one is the "best." I'm leaning towards option D - defining the target architecture first to avoid carrying forward the current problems. But I'd need to think it through a bit more.

upvoted 0 times

...

Gearldine

6 months ago

This is a tricky one, but I think fire protection and safety is definitely a component of physical infrastructure. I'll mark False.

upvoted 0 times

...

Laurel

6 months ago

Okay, let's see. I'm pretty sure the property is set to true, so that's not the issue. Maybe it has something to do with remote JMX functionality being disabled by default?

upvoted 0 times

...

Sharita

10 months ago

I'm going with option A. Placing ads on European travel websites? That's like waving a big 'GDPR, come get me!' flag. The hotel might as well just roll out the red carpet for the data protection authorities.

upvoted 0 times

...

Audrie

10 months ago

Option B is the way to go! Collecting public data from business directories? That's a totally legit way to get those European travelers without having to worry about the GDPR. Genius!

upvoted 0 times

Kami

9 months ago

Definitely! It's a clever way to target a specific audience without having to worry about compliance issues.

upvoted 0 times

...

Salome

9 months ago

That's a smart move! It's a great way to reach out to European travelers without getting caught up in GDPR.

upvoted 0 times

...

Anjelica

9 months ago

B) Collecting contact information for foreign business leaders from public directories.

upvoted 0 times

...

Ricki

11 months ago

Haha, imagine the hotel trying to avoid the GDPR by just not translating their website. 'Sorry, you can't book here if you don't speak English!' That's not going to work, guys.

upvoted 0 times

Mireya

10 months ago

C: Sending discount offers to guests who previously registered using a foreign address.

upvoted 0 times

...

Lizette

10 months ago

B: Collecting contact information for foreign business leaders from public directories.

upvoted 0 times

...

Salina

10 months ago

A: Placing advertisements on travel websites accessible in Europe.

upvoted 0 times

...

Alva

11 months ago

I'm not sure, but option C looks a bit sketchy to me. Sending discount offers to guests with foreign addresses could be seen as a way to specifically target Europeans, which could trigger GDPR compliance.

upvoted 0 times

Ricki

9 months ago

D) Translating the hotel's registration page into German based on the visitor's IP address.

upvoted 0 times

...

Elmira

9 months ago

I agree, option C does seem like it could raise some red flags.

upvoted 0 times

...

Paz

9 months ago

C) Sending discount offers to guests who previously registered using a foreign address.

upvoted 0 times

...

Cherry

10 months ago

B) Collecting contact information for foreign business leaders from public directories.

upvoted 0 times

...

Antione

10 months ago

A) Placing advertisements on travel websites accessible in Europe.

upvoted 0 times

...

Rupert

10 months ago

B: Yeah, targeting guests with foreign addresses might make the hotel subject to GDPR.

upvoted 0 times

...

Portia

10 months ago

A: I think option C could definitely raise some red flags.

upvoted 0 times

...

Jacqueline

11 months ago

Option D seems like the obvious choice here. Translating the website based on the visitor's IP address is a clear indication that the hotel is targeting European travelers and is likely to fall under the GDPR's jurisdiction.

upvoted 0 times

...