New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

IAPP CIPP/US Exam - Topic 3 Question 87 Discussion

Actual exam question for IAPP's CIPP/US exam
Question #: 87
Topic #: 3
[All CIPP/US Questions]

SCENARIO

Please use the following to answer the next QUESTION:

Matt went into his son's bedroom one evening and found him stretched out on his bed typing on his laptop. ''Doing your network?'' Matt asked hopefully.

''No,'' the boy said. ''I'm filling out a survey.''

Matt looked over his son's shoulder at his computer screen. ''What kind of survey?'' ''It's asking Questions about my opinions.''

''Let me see,'' Matt said, and began reading the list of Questions that his son had already answered. ''It's asking your opinions about the government and citizenship. That's a little odd. You're only ten.''

Matt wondered how the web link to the survey had ended up in his son's email inbox. Thinking the message might have been sent to his son by mistake he opened it and read it. It had come from an entity called the Leadership Project, and the content and the graphics indicated that it was intended for children. As Matt read further he learned that kids who took the survey were automatically registered in a contest to win the first book in a series about famous leaders.

To Matt, this clearly seemed like a marketing ploy to solicit goods and services to children. He asked his son if he had been prompted to give information about himself in order to take the survey. His son told him he had been asked to give his name, address, telephone number, and date of birth, and to answer Questions about his favorite games and toys.

Matt was concerned. He doubted if it was legal for the marketer to collect information from his son in the way that it was. Then he noticed several other commercial emails from marketers advertising products for children in his son's inbox, and he decided it was time to report the incident to the proper authorities.

How does Matt come to the decision to report the marketer's activities?

Show Suggested Answer Hide Answer
Suggested Answer: C

Matt's decision to report the marketer's activities is based on his suspicion that the marketer violated the Children's Online Privacy Protection Act (COPPA), which is a federal law that regulates the online collection, use, and disclosure of personal information from children under 13 years of age1. According to COPPA, operators of websites or online services that are directed to children or knowingly collect personal information from children must:

Provide notice to parents about their information practices and obtain verifiable parental consent before collecting, using, or disclosing personal information from children12.

Give parents the choice of consenting to the operator's collection and internal use of a child's information, but prohibiting the operator from disclosing that information to third parties (unless disclosure is integral to the site or service, in which case, this must be made clear to parents)12.

Provide parents access to their child's personal information to review and/or have the information deleted and give parents the opportunity to prevent further use or online collection of a child's personal information12.

Maintain the confidentiality, security, and integrity of information they collect from children, including by taking reasonable steps to release such information only to parties capable of maintaining its confidentiality and security12.

Retain personal information collected online from a child for only as long as is necessary to fulfill the purpose for which it was collected and delete the information using reasonable measures to protect against its unauthorized access or use12.

Establish and maintain reasonable procedures to protect the confidentiality, security, and integrity of personal information collected from children12.

In Matt's case, he did not receive any notice from the marketer about the survey or the contest, nor did he give his consent for the collection or disclosure of his son's personal information. He also did not have any access or control over his son's information or the ability to prevent further use or collection. Moreover, he noticed that his son's information seemed to have been shared with other marketers, as evidenced by the commercial emails in his son's inbox. These actions indicate that the marketer did not comply with COPPA's requirements and may have exposed his son's information to unauthorized or inappropriate parties.Therefore, Matt decided to report the marketer's activities to the proper authorities, such as the Federal Trade Commission (FTC), which enforces COPPA and can impose civil penalties for violations13.Reference:1: Children's Online Privacy Protection Act | Federal Trade Commission,1.2: 16 CFR Part 312 -- Children's Online Privacy Protection Rule,3.3: Children's Online Privacy Protection Act - Wikipedia,2.


Contribute your Thoughts:

0/2000 characters
Omer
16 days ago
Wait, they can just collect info like that?
upvoted 0 times
...
Ruth
21 days ago
Haha, "famous leaders" contest? More like "famous scammers" contest. C) for sure.
upvoted 0 times
...
Carissa
26 days ago
Wow, that marketer is really slimy. C) all the way!
upvoted 0 times
...
Jerilyn
1 month ago
C) and D) - The marketer is clearly trying to take advantage of children. Matt is right to report this.
upvoted 0 times
...
Mitzie
1 month ago
D) The marketer failed to identify himself and indicate the purpose of the messages. Shady business practices like that are unacceptable.
upvoted 0 times
...
Jarod
1 month ago
C) The marketer seems to have distributed his son's information without Matt's permission. That's a clear violation of privacy.
upvoted 0 times
...
Keneth
2 months ago
I feel like there’s something about the legality of collecting data from minors that we covered, but I can’t recall all the details. It seems like Matt has valid concerns.
upvoted 0 times
...
Sean
2 months ago
This reminds me of a practice question we did about online privacy for children. I think the marketer not identifying themselves is a big issue too, like in option D.
upvoted 0 times
...
Lang
2 months ago
I’m not entirely sure, but I think option C makes the most sense since Matt is worried about his son's information being shared without permission.
upvoted 0 times
...
Hyman
2 months ago
Okay, I think I've got it. The key is that the marketer collected the son's personal info without the parent's permission. Even if the survey was intended for kids, that's a major breach of privacy. I'd go with option C on this one.
upvoted 0 times
...
Leah
2 months ago
Hmm, I'm not sure. The question says the content and graphics indicated it was intended for children, but it doesn't explicitly state that the survey itself was for kids. I'd want to double-check that before deciding. Maybe option D is the safest choice here.
upvoted 0 times
...
Jerilyn
2 months ago
This seems pretty straightforward to me. The marketer was clearly trying to gather personal data from a minor without the parent's consent. That's a big no-no in my book. I'd have no problem reporting them to the authorities if I were Matt.
upvoted 0 times
...
Yen
3 months ago
Sounds like a total marketing scam to me.
upvoted 0 times
...
Francis
3 months ago
I think Matt's right to be concerned.
upvoted 0 times
...
Ivan
3 months ago
I remember discussing how important it is for marketers to get parental consent when collecting information from kids. This seems like a clear violation.
upvoted 0 times
...
Maddie
3 months ago
I can't believe they target kids like this!
upvoted 0 times
...
Solange
4 months ago
I'm a little confused about the details here. Was the survey actually intended for children, or was it just marketed that way? And did the marketer explicitly state they would be collecting the personal info, or was that hidden? I'd need to know more to decide.
upvoted 0 times
...
Franklyn
4 months ago
I think the key here is that the marketer collected personal information from the son without the parent's permission. That seems like a major breach of privacy, so I'd go with option C.
upvoted 0 times
Rosendo
3 months ago
I agree! It's all about protecting their privacy.
upvoted 0 times
...
...

Save Cancel