An online business has implemented cookies in its retail website to track customer shopping behavior. Which of the following is the MOST important process to ensure customers' privacy rights are not c

Question

Options

• ARemoving tracked customer data from the website
• BUpdating the privacy risk profile to include the use of cookies
• CObtaining customer consent to accept cookies
• DDesigning metrics to monitor performance of cookies

• A
  3% (1)
• B
  6% (2)
• C
  88% (30)
• D
  3% (1)

Explanation

Cookies that track customer behavior involve processing personal data, and privacy regulations such as GDPR and ePrivacy Directive require informed consent before non-essential cookies are placed. Obtaining customer consent (C) is the foundational requirement that gives individuals control over their data and ensures the organization lawfully processes it. Removing tracked data (A) would eliminate the business value of the cookies entirely and is not a process for protecting rights. Updating the internal risk profile (B) is an internal governance activity that does not directly protect customer rights. Designing performance metrics for cookies (D) monitors business outcomes, not privacy compliance.

No community discussion yet for this question.