Certified Information Privacy Professional – Asia (CIPP/A) — Question 53

In June 2011, the Hong Kong Privacy Commissioner determined that data subject consent is NOT valid if it is what?

Answer options

• A. Provided by the data subject solely in verbal form.
• B. Used for a directly related but separate purpose.
• C. Bundled with other terms of the agreement.
• D. Intended for direct marketing purposes.

Correct answer: C

Explanation

The correct answer is C because consent is deemed invalid if it is bundled with other terms, making it unclear if the data subject is specifically consenting to the data processing. Options A, B, and D do not reflect the criteria that invalidate consent as per the commissioner's ruling.