IAPP CIPT Exam - Topic 2 Question 71 Discussion

Actual exam question for IAPP's CIPT exam

Question #: 71
Topic #: 2

After downloading and loading a mobile app, the user is presented with an account registration page requesting the user to provide certain personal details. Two statements are also displayed on the same page along with a box for the user to check to indicate their confirmation:

Statement 1 reads: ''Please check this box to confirm you have read and accept the terms and conditions of the end user license agreement'' and includes a hyperlink to the terms and conditions.

Statement 2 reads: ''Please check this box to confirm you have read and understood the privacy notice'' and includes a hyperlink to the privacy notice.

Under the General Data Protection Regulation (GDPR), what lawful basis would you primarily except the privacy notice to refer to?

AConsent.

BVital interests.

CLegal obligation.

DLegitimate interests.

Show Suggested Answer

Suggested Answer: D

referential integrity does not contribute to keeping the data confidential.

by Cristy at Aug 07, 2023, 11:51 AM

Limited Time Offer

25%

Off

Get Premium CIPT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Theodora

5 months ago

I don't know, isn't there more to it than just checking a box?

upvoted 0 times

...

Wilson

6 months ago

Gotta go with A, that's what GDPR is all about!

upvoted 0 times

...

Marilynn

6 months ago

Wait, are we really sure it's consent? Seems a bit vague.

upvoted 0 times

...

Carry

6 months ago

I think it's more about legitimate interests, not just consent.

upvoted 0 times

...

Reena

6 months ago

Definitely A, consent is key for privacy notices.

upvoted 0 times

...

Chandra

6 months ago

I definitely recall that consent is a key aspect, but I wonder if there are situations where legal obligation could apply too.

upvoted 0 times

...

Lucia

7 months ago

I'm a bit confused. Could it also be about legitimate interests? I feel like I read something about that in our GDPR notes.

upvoted 0 times

...

Cecil

7 months ago

I remember practicing a question like this, and I think consent is the right answer since users need to agree to how their data is used.

upvoted 0 times

...

Vivienne

7 months ago

I think the privacy notice is mostly about consent, right? But I'm not entirely sure if that's the only option.

upvoted 0 times

...

Dannette

7 months ago

Okay, let me think this through step-by-step. PDCA stands for Plan, Do, Check, Act. The core idea is about continuously improving processes through this cycle. So I think the best answer is C - Continual improvement.

upvoted 0 times

...

Elenora

7 months ago

I'm not entirely sure about this one. I know that custom form stencils are used to extend the functionality of the Process Designer, but I'm not confident about the specific reasons why a developer would create one. I'll need to review my notes on form stencils before attempting to answer this.

upvoted 0 times

...

Magda

7 months ago

The wording of these options is tricky. I'll need to pay close attention to the details.

upvoted 0 times

...

Farrah

7 months ago

Wait, I'm confused. The question mentions "management and other personnel," which makes me think it's not just about controls. I'll have to re-read the question and options more closely to make sure I understand what they're asking.

upvoted 0 times

...

Marjory

7 months ago

Whoa, this is a lot of information to take in. I'm not sure where to start. I guess I'll try to break down the key points about the different dividend policy proposals and then evaluate Neely's comments.

upvoted 0 times

...

Meaghan

12 months ago

This question is making my head spin more than a fidget spinner! But I'm pretty sure the answer is consent. Time to put on my reading glasses and dive into those terms and conditions.

upvoted 0 times

...

Germaine

12 months ago

If I had a nickel for every time I had to read those privacy notices, I'd be a wealthy person! Anyway, I'm going with option A - consent.

upvoted 0 times

Carlene

10 months ago

It's important to understand what we're agreeing to though, even if it's tedious.

upvoted 0 times

...

Dorsey

10 months ago

Yeah, I always just quickly skim through them and click 'agree'.

upvoted 0 times

...

Sueann

11 months ago

I think option A - consent is the most likely lawful basis for the privacy notice.

upvoted 0 times

...

Delila

11 months ago

I agree, those privacy notices can be a pain to read.

upvoted 0 times

...

Janella

12 months ago

Hmm, I'm not sure. Let me double-check the GDPR requirements. This is tricky, but I'll figure it out!

upvoted 0 times

Denna

10 months ago

C) Legal obligation.

upvoted 0 times

...

Shawnee

11 months ago

B) Vital interests.

upvoted 0 times

...

Irma

11 months ago

A) Consent.

upvoted 0 times

...

Laticia

1 year ago

I think the privacy notice would be referring to the lawful basis of legitimate interests. The app likely needs to process user data to provide the service.

upvoted 0 times

Dylan

11 months ago

Yeah, that makes sense. The app needs to process data for its service.

upvoted 0 times

...

Sharita

11 months ago

I agree, I also think it would be legitimate interests.

upvoted 0 times

...

Virgie

11 months ago

D) Legitimate interests.

upvoted 0 times

...

Mira

11 months ago

C) Legal obligation.

upvoted 0 times

...

Lajuana

11 months ago

B) Vital interests.

upvoted 0 times

...

Nadine

12 months ago

A) Consent.

upvoted 0 times

...

Casandra

1 year ago

The privacy notice likely refers to the lawful basis of consent under GDPR. Users must expressly agree to the privacy terms before providing their personal details.

upvoted 0 times