nerdexam
IAPP

CIPP-E · Question #150

CIPP-E Question #150: Real Exam Question with Answer & Explanation

Sign in or unlock CIPP-E to reveal the answer and full explanation for question #150. The question stem and answer options stay visible for context.

Question

SCENARIO Please use the following to answer the next question: BHealthy, a company based in Italy, is ready to launch a new line of natural products, with a focus on sunscreen. The last step prior to product launch is for BHealthy to conduct research to decide how extensively to market its new line of sunscreens across Europe. To do so, BHealthy teamed up with Natural Insight, a company specializing in determining pricing for natural products. BHealthy decided to share its existing customer information ?name, location, and prior purchase history ?with Natural Insight. Natural Insight intends to use this information to train its algorithm to help determine the price point at which BHealthy can sell its new sunscreens. Prior to sharing its customer list, BHealthy conducted a review of Natural Insight's security practices and concluded that the company has sufficient security measures to protect the contact information. Additionally, BHealthy's data processing contractual terms with Natural Insight require continued implementation of technical and organization measures. Also indicated in the contract are restrictions on use of the data provided by BHealthy for any purpose beyond provision of the services, which include use of the data for continued improvement of Natural Insight's machine learning algorithms. Under the GDPR, what are Natural Insight's security obligations with respect to the customer information it received from BHealthy?

Options

  • AAppropriate security that takes into account the industry practices for protecting customer contact
  • BOnly the security measures assessed by BHealthy prior to entering into the data processing
  • CAbsolute security since BHealthy is sharing personal data, including purchase history, with
  • DThe level of security that a reasonable data subject whose data is processed would expect in

Unlock CIPP-E to see the answer

You've previewed enough free CIPP-E questions. Unlock CIPP-E for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full CIPP-E Practice