CIPP-E Dumps Questions With Valid Answers

Under Article 58 of the GDPR, which of the following describes a power of supervisory authorities in European Union (EU) member states?

Please use the following to answer the next question:
T-Craze, a German-headquartered specialty t-shirt company, was successfully selling to
large German metropolitan cities. However, after a recent merger with another Germanbased
company that was selling to a broader European market, T-Craze revamped its
marketing efforts to sell to a wider audience. These efforts included a complete redesign of
its logo to reflect the recent merger, and improvements to its website meant to capture
more information about visitors through the use of cookies.
T-Craze also opened various office locations throughout Europe to help expand its
business. While Germany continued to host T-Craze’s headquarters and main productdesign
office, its French affiliate became responsible for all marketing and sales activities.
The French affiliate recently procured the services of Right Target, a renowned marketing
firm based in the Philippines, to run its latest marketing campaign. After thorough research,
Right Target determined that T-Craze is most successful with customers between the ages
of 18 and 22. Thus, its first campaign targeted university students in several European
capitals, which yielded nearly 40% new customers for T-Craze in one quarter. Right Target
also ran subsequent campaigns for T- Craze, though with much less success.
The last two campaigns included a wider demographic group and resulted in countless
unsubscribe requests, including a large number in Spain. In fact, the Spanish data
protection authority received a complaint from Sofia, a mid-career investment banker. Sofia
was upset after receiving a marketing communication even after unsubscribing from such
communications from the Right Target on behalf of T-Craze.
Which of the following is T-Craze’s lead supervisory authority?

Please use the following to answer the next question:
Brady is a computer programmer based in New Zealand who has been running his own
business for two years. Brady’s business provides a low-cost suite of services to customers
throughout the European Economic Area (EEA). The services are targeted towards new
and aspiring small business owners. Brady’s company, called Brady Box, provides web
page design services, a Social Networking Service (SNS) and consulting services that help people manage their own online stores.
Unfortunately, Brady has been receiving some complaints. A customer named Anna
recently uploaded her plans for a new product onto Brady Box’s chat area, which is open to
public viewing. Although she realized her mistake two weeks later and removed the
document, Anna is holding Brady Box responsible for not noticing the error through regular
monitoring of the website. Brady believes he should not be held liable.
Another customer, Felipe, was alarmed to discover that his personal information was
transferred to a third- party contractor called Hermes Designs and worries that sensitive
information regarding his business plans may be misused. Brady does not believe he
violated European privacy rules. He provides a privacy notice to all of his customers
explicitly stating that personal data may be transferred to specific third parties in fulfillment
of a requested service. Felipe says he read the privacy notice but that it was long and
complicated
Brady continues to insist that Felipe has no need to be concerned, as he can personally
vouch for the integrity of Hermes Designs. In fact, Hermes Designs has taken the initiative
to create sample customized banner advertisements for customers like Felipe. Brady is
happy to provide a link to the example banner ads, now posted on the Hermes Designs
webpage. Hermes Designs plans on following up with direct marketing to these customers.
Brady was surprised when another customer, Serge, expressed his dismay that a quotation
by him is being used within a graphic collage on Brady Box’s home webpage. The
quotation is attributed to Serge by first and last name. Brady, however, was not worried
about any sort of litigation. He wrote back to Serge to let him know that he found the
quotation within Brady Box’s Social Networking Service (SNS), as Serge himself had
posted the quotation. In his response, Brady did offer to remove the quotation as a
courtesy.
Despite some customer complaints, Brady’s business is flourishing. He even supplements
his income through online behavioral advertising (OBA) via a third-party ad network with
whom he has set clearly defined roles. Brady is pleased that, although some customers are
not explicitly aware of the OBA, the advertisements contain useful products and services.
Based on the scenario, what is the main reason that Brady should be concerned with
Hermes Designs’ handling of customer personal data?

Which judicial body makes decisions on actions taken by individuals wishing to enforce their rights under EU law?

Article 5(1)(b) of the GDPR states that personal data must be “collected for specified,
explicit and legitimate purposes and not further processed in a way incompatible with those
purposes.” Based on Article 5(1)(b),
what is the impact of a member state’s interpretation of the word “incompatible”?