nerdexam
Isaca

CDPSE · Question #253

A technology company has just launched a mobile application for tracking health symptoms. This application is built on a mobile device technology stack that allows users to share their location and de

The correct answer is D. Data usage without consent. Health symptom data combined with precise location data is among the most sensitive categories of personal information recognized by privacy regulations worldwide (e.g., GDPR, HIPAA-adjacent frameworks, CCPA). The greatest privacy concern is collecting and using this data without

Data Life Cycle

Question

A technology company has just launched a mobile application for tracking health symptoms. This application is built on a mobile device technology stack that allows users to share their location and details of their symptoms. Which of the following is the GREATEST privacy concern with collecting this data via mobile devices?

Options

  • AClient-side device ID
  • BData storage requirements
  • CEncryption of key data elements
  • DData usage without consent

How the community answered

(26 responses)
  • A
    8% (2)
  • B
    4% (1)
  • C
    15% (4)
  • D
    73% (19)

Explanation

Health symptom data combined with precise location data is among the most sensitive categories of personal information recognized by privacy regulations worldwide (e.g., GDPR, HIPAA-adjacent frameworks, CCPA). The greatest privacy concern is collecting and using this data without the user's informed consent. Without consent, any downstream use - sharing with advertisers, insurers, employers, or government entities - is a fundamental privacy violation. Device ID tracking, encryption gaps, and storage requirements are technical concerns, but they are mitigations for secondary risks. The root and most severe concern is whether users have meaningfully agreed to the collection and intended use of their sensitive health and location data.

Topics

#Consent#Data usage#Mobile privacy#Sensitive data

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice