Certified Information Privacy Professional – Europe (CIPP/E) — Question 46

An entity’s website stores text files on EU users’ computer and mobile device browsers. Prior to doing so, the entity is required to provide users with notices containing information and consent under which of the following frameworks?

Answer options

• A. General Data Protection Regulation 2016/679.
• B. E-Privacy Directive 2002/58/EC.
• C. E-Commerce Directive 2000/31/EC.
• D. Data Protection Directive 95/46/EC.

Correct answer: B

Explanation

The correct answer is B, the E-Privacy Directive 2002/58/EC, which specifically addresses the use of cookies and similar technologies, requiring user consent. While the General Data Protection Regulation (A) is important for data protection, it does not specifically govern cookies. The E-Commerce Directive (C) and the Data Protection Directive (D) are also not focused on the consent requirement for storing information on users' devices.