Certified Information Privacy Professional – United States (CIPP/US) — Question 171

A company’s employee wellness portal offers an app to track exercise activity via users’ mobile devices. Which of the following design techniques would most effectively inform users of their data privacy rights and privileges when using the app?

Answer options

• A. Offer information about data collection and uses at key data entry points.
• B. Publish a privacy policy written in clear, concise, and understandable language.
• C. Present a privacy policy to users during the wellness program registration process.
• D. Provide a link to the wellness program privacy policy at the bottom of each screen.

Correct answer: C

Explanation

Presenting the privacy policy during the wellness program registration process ensures that users are informed about their data privacy rights before they start using the app. While the other options provide valuable information, they may not reach users as effectively at a critical point of engagement, which is during registration.