New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

IAPP CIPP-E Exam - Topic 2 Question 45 Discussion

Actual exam question for IAPP's CIPP-E exam
Question #: 45
Topic #: 2
[All CIPP-E Questions]

SCENARIO

Please use the following to answer the next question:

ABC Hotel Chain and XYZ Travel Agency are U.S.-based multinational companies. They use an internet-based common platform for collecting and sharing their customer data with each other, in order to integrate their marketing efforts. Additionally, they agree on the data to be stored, how reservations will be booked and confirmed, and who has access to the stored data.

Mike, an EU resident, has booked travel itineraries in the past through XYZ Travel Agency to stay at ABC Hotel Chain's locations. XYZ Travel Agency offers a rewards program that allows customers to sign up to accumulate points that can later be redeemed for free travel. Mike has signed the agreement to be a rewards program member.

Now Mike wants to know what personal information the company holds about him. He sends an email requesting access to his data, in order to exercise what he believes are his data subject rights.

What are ABC Hotel Chain and XYZ Travel Agency's roles in this relationship?

Show Suggested Answer Hide Answer
Suggested Answer: A

Contribute your Thoughts:

0/2000 characters
Leota
4 months ago
Not sure about that, seems a bit complicated.
upvoted 0 times
...
Karima
5 months ago
Totally agree, they should be joint controllers!
upvoted 0 times
...
Ressie
5 months ago
Wait, can they just share my data like that?
upvoted 0 times
...
Hobert
5 months ago
I think they're both independent controllers, right?
upvoted 0 times
...
Herminia
5 months ago
ABC Hotel Chain is the controller, XYZ Travel Agency is the processor.
upvoted 0 times
...
Devora
5 months ago
I’m a bit confused about the terms. If they both decide on how to use the data, wouldn’t that make them joint controllers?
upvoted 0 times
...
Chantay
5 months ago
I'm leaning towards option C, independent controllers, but I feel like I need to double-check the definitions of controller and processor again.
upvoted 0 times
...
Vashti
5 months ago
I remember a similar question where we discussed joint controllers. It seems like both companies are making decisions about the data together, so maybe that's the answer?
upvoted 0 times
...
Beckie
5 months ago
I think ABC Hotel Chain is the controller because they manage the hotel bookings, but I'm not entirely sure about XYZ Travel Agency's role.
upvoted 0 times
...
Stephaine
5 months ago
I'm a bit confused by this question. There are a lot of different factors to consider, and I'm not sure I fully understand how they all fit together. I'll need to review the material on authorization mechanisms and think through some examples to make sure I'm on the right track.
upvoted 0 times
...
Ashley
5 months ago
Okay, I think I know the answer to this one. The left-hand side of the Solutions Continuum would be the more basic, foundational solutions, right?
upvoted 0 times
...
Nicholle
5 months ago
I want to say Option A because it looks familiar from my notes, but there were so many variations in the examples we went over that I'm not completely confident.
upvoted 0 times
...
Fidelia
5 months ago
I think this is a straightforward question about where to find verified email addresses in Marketing Cloud. I'll carefully review the options and select the one that best matches the question.
upvoted 0 times
...
Erasmo
5 months ago
This looks like a pretty straightforward consolidation question. I think the key is to properly set up the consolidation legal entity and make sure the eliminations are handled correctly.
upvoted 0 times
...
Latrice
5 months ago
I'm not really sure about the specifics, but I think experiential marketing definitely has something to do with connecting experiences to the brand itself, right?
upvoted 0 times
...

Save Cancel