nerdexam
IAPP

CIPP-US · Question #54

What is the most important action an organization can take to comply with the FTC position on retroactive changes to a privacy policy?

The correct answer is B. Obtaining affirmative consent from its customers.. The FTC has stated that it is a deceptive practice to make retroactive changes to a privacy policy that affect how a company uses or shares previously collected personal information, unless the company obtains affirmative consent from the affected consumers. This means that the c

Limits on Private-Sector Collection and Use of Data

Question

What is the most important action an organization can take to comply with the FTC position on retroactive changes to a privacy policy?

Options

  • ADescribing the policy changes on its website.
  • BObtaining affirmative consent from its customers.
  • CPublicizing the policy changes through social media.
  • DReassuring customers of the security of their information.

How the community answered

(38 responses)
  • A
    5% (2)
  • B
    82% (31)
  • C
    3% (1)
  • D
    11% (4)

Explanation

The FTC has stated that it is a deceptive practice to make retroactive changes to a privacy policy that affect how a company uses or shares previously collected personal information, unless the company obtains affirmative consent from the affected consumers. This means that the company must clearly and conspicuously disclose the changes and obtain the consumers' express agreement to them. Simply describing the policy changes on the website, publicizing them through social media, or reassuring customers of the security of their information are not sufficient to comply with the FTC's position.

Topics

#FTC enforcement#privacy policy changes#retroactive consent#affirmative consent

Community Discussion

No community discussion yet for this question.

Full CIPP-US Practice