IAPP CIPT Exam - Topic 2 Question 71 Discussion

Actual exam question for IAPP's CIPT exam

Question #: 71
Topic #: 2

After downloading and loading a mobile app, the user is presented with an account registration page requesting the user to provide certain personal details. Two statements are also displayed on the same page along with a box for the user to check to indicate their confirmation:

Statement 1 reads: ''Please check this box to confirm you have read and accept the terms and conditions of the end user license agreement'' and includes a hyperlink to the terms and conditions.

Statement 2 reads: ''Please check this box to confirm you have read and understood the privacy notice'' and includes a hyperlink to the privacy notice.

Under the General Data Protection Regulation (GDPR), what lawful basis would you primarily except the privacy notice to refer to?

AConsent.

BVital interests.

CLegal obligation.

DLegitimate interests.

Show Suggested Answer

Suggested Answer: D

referential integrity does not contribute to keeping the data confidential.

by Cristy at Aug 07, 2023, 11:51 AM

Limited Time Offer

25%

Off

Get Premium CIPT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Theodora

10 months ago

I don't know, isn't there more to it than just checking a box?

upvoted 0 times

...

Wilson

10 months ago

Gotta go with A, that's what GDPR is all about!

upvoted 0 times

...

Marilynn

10 months ago

Wait, are we really sure it's consent? Seems a bit vague.

upvoted 0 times

...

Carry

11 months ago

I think it's more about legitimate interests, not just consent.

upvoted 0 times

...

Reena

11 months ago

Definitely A, consent is key for privacy notices.

upvoted 0 times

...

Chandra

11 months ago

I definitely recall that consent is a key aspect, but I wonder if there are situations where legal obligation could apply too.

upvoted 0 times

...

Lucia

11 months ago

I'm a bit confused. Could it also be about legitimate interests? I feel like I read something about that in our GDPR notes.

upvoted 0 times

...

Cecil

11 months ago

I remember practicing a question like this, and I think consent is the right answer since users need to agree to how their data is used.

upvoted 0 times

...

Vivienne

11 months ago

I think the privacy notice is mostly about consent, right? But I'm not entirely sure if that's the only option.

upvoted 0 times

...

Dannette

12 months ago

Okay, let me think this through step-by-step. PDCA stands for Plan, Do, Check, Act. The core idea is about continuously improving processes through this cycle. So I think the best answer is C - Continual improvement.

upvoted 0 times

...

Elenora

12 months ago

I'm not entirely sure about this one. I know that custom form stencils are used to extend the functionality of the Process Designer, but I'm not confident about the specific reasons why a developer would create one. I'll need to review my notes on form stencils before attempting to answer this.

upvoted 0 times

...

Magda

12 months ago

The wording of these options is tricky. I'll need to pay close attention to the details.

upvoted 0 times

...

Farrah

12 months ago

Wait, I'm confused. The question mentions "management and other personnel," which makes me think it's not just about controls. I'll have to re-read the question and options more closely to make sure I understand what they're asking.

upvoted 0 times

...

Marjory

12 months ago

Whoa, this is a lot of information to take in. I'm not sure where to start. I guess I'll try to break down the key points about the different dividend policy proposals and then evaluate Neely's comments.

upvoted 0 times

...

Meaghan

1 year ago

This question is making my head spin more than a fidget spinner! But I'm pretty sure the answer is consent. Time to put on my reading glasses and dive into those terms and conditions.

upvoted 0 times

...

Germaine

1 year ago

If I had a nickel for every time I had to read those privacy notices, I'd be a wealthy person! Anyway, I'm going with option A - consent.

upvoted 0 times

Carlene

1 year ago

It's important to understand what we're agreeing to though, even if it's tedious.

upvoted 0 times

...

Dorsey

1 year ago

Yeah, I always just quickly skim through them and click 'agree'.

upvoted 0 times

...

Sueann

1 year ago

I think option A - consent is the most likely lawful basis for the privacy notice.

upvoted 0 times

...

Delila

1 year ago

I agree, those privacy notices can be a pain to read.

upvoted 0 times

...

Janella

1 year ago

Hmm, I'm not sure. Let me double-check the GDPR requirements. This is tricky, but I'll figure it out!

upvoted 0 times

Denna

1 year ago

C) Legal obligation.

upvoted 0 times

...

Shawnee

1 year ago

B) Vital interests.

upvoted 0 times

...

Irma

1 year ago

A) Consent.

upvoted 0 times

...

Laticia

1 year ago

I think the privacy notice would be referring to the lawful basis of legitimate interests. The app likely needs to process user data to provide the service.

upvoted 0 times

Dylan

1 year ago

Yeah, that makes sense. The app needs to process data for its service.

upvoted 0 times

...

Sharita

1 year ago

I agree, I also think it would be legitimate interests.

upvoted 0 times

...

Virgie

1 year ago

D) Legitimate interests.

upvoted 0 times

...

Mira

1 year ago

C) Legal obligation.

upvoted 0 times

...

Lajuana

1 year ago

B) Vital interests.

upvoted 0 times

...

Nadine

1 year ago

A) Consent.

upvoted 0 times

...

Casandra

1 year ago

The privacy notice likely refers to the lawful basis of consent under GDPR. Users must expressly agree to the privacy terms before providing their personal details.

upvoted 0 times