Certified Information Privacy Professional – Europe (CIPP/E) — Question 25

In which of the following cases would an organization MOST LIKELY be required to follow both ePrivacy and data protection rules?

Answer options

• A. When creating an untargeted pop-up ad on a website.
• B. When calling a potential customer to notify her of an upcoming product sale.
• C. When emailing a customer to announce that his recent order should arrive earlier than expected.
• D. When paying a search engine company to give prominence to certain products and services within specific search results.

Correct answer: B

Explanation

The correct answer is B, as it involves direct communication with a potential customer, which falls under both ePrivacy and data protection rules. The other options either do not involve personal data or do not require such compliance, like creating pop-up ads or paying for search result prominence.