nerdexam
IAPP

CIPP-US · Question #148

A software company wants to use web scraping to collect personal data from professional networking websites in order to train an artificial intelligence program to evaluate Job applications. The compa

The correct answer is B. Adding a notice to the company website's terms of use disclosing the use of web scraping. Web scraping to collect personal data can pose significant legal and ethical risks, particularly when it involves professional networking sites or other platforms where terms of service (ToS) explicitly prohibit such activity. To limit liability, the software company must take pr

Limits on Private-Sector Collection and Use of Data

Question

A software company wants to use web scraping to collect personal data from professional networking websites in order to train an artificial intelligence program to evaluate Job applications. The company has identified several actions for limiting their potential legal liability regarding affected data subjects and professional networking websites. Which of the following would be the least effective action for helping them do this?

Options

  • AFollowing the terms of use posted on professional networking websites that are scraped.
  • BAdding a notice to the company website's terms of use disclosing the use of web scraping
  • CLimiting the amount of the personally identifiable information they collect
  • DDecertifying the scraped data before selling it to any third parties.

How the community answered

(47 responses)
  • A
    4% (2)
  • B
    70% (33)
  • C
    17% (8)
  • D
    9% (4)

Explanation

Web scraping to collect personal data can pose significant legal and ethical risks, particularly when it involves professional networking sites or other platforms where terms of service (ToS) explicitly prohibit such activity. To limit liability, the software company must take proactive measures to comply with applicable laws (such as privacy laws) and contractual obligations (e.g., terms of use on the scraped websites). Adding a notice to the company website's terms of use would be the least effective action, as it does not address the legal and ethical issues associated with scraping data from third-party websites. Simply adding a notice about the company's use of scraping does not mitigate liability for violating the ToS of professional networking websites or violating privacy rights under laws like the GDPR or CCPA.

Topics

#web scraping#AI training data#PII minimization#legal liability

Community Discussion

No community discussion yet for this question.

Full CIPP-US Practice