Bird
0
0

A company wants to use customer data for marketing but only has implied consent from website visits. According to GDPR, what should the company do?

hard🚀 Application Q15 of 15
Cybersecurity - Compliance and Governance
A company wants to use customer data for marketing but only has implied consent from website visits. According to GDPR, what should the company do?
AObtain explicit consent before using data for marketing
BUse the data freely since the customer visited the site
CAssume consent if the customer did not opt out
DShare data with partners without informing customers
Step-by-Step Solution
Solution:
  1. Step 1: Identify consent type needed for marketing

    GDPR requires explicit consent for using personal data in marketing, not implied or assumed consent.
  2. Step 2: Determine correct action

    The company must get clear, explicit consent before using data for marketing purposes.
  3. Final Answer:

    Obtain explicit consent before using data for marketing -> Option A
  4. Quick Check:

    Marketing needs explicit consent [OK]
Quick Trick: Marketing always requires explicit consent under GDPR [OK]
Common Mistakes:
MISTAKES
  • Assuming visiting a site equals consent
  • Thinking opt-out is enough for consent
  • Ignoring the need to inform customers

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Cybersecurity Quizzes