CDPSE Consent Management 2

Question 1

What is 'implied consent' and why is it generally insufficient under modern privacy regulations?

Accepted Answer

Implied consent is inferred from user behavior without explicit agreement; regulations such as GDPR require unambiguous action

Answer

Implied consent is documented consent stored in an encrypted log; regulators prefer verbal consent instead

Answer

Implied consent refers to consent given by a legal guardian; most laws now require direct consent from the individual

Answer

Implied consent is consent obtained through a third party; regulations require first-party consent only

Question 2

Under COPPA (Children's Online Privacy Protection Act), what is required before collecting personal data from children under 13 in the US?

Accepted Answer

Verifiable parental consent obtained before collection begins

Answer

Consent from the child using an age-appropriate interface

Answer

A signed data processing agreement with the school the child attends

Answer

Consent from a court-appointed privacy guardian

Question 3

Why is maintaining a consent record or audit trail critical for CDPSE professionals?

Accepted Answer

It provides evidence of compliance and enables organizations to demonstrate that valid consent was obtained when challenged

Answer

It improves website load time by caching consent decisions closer to the user

Answer

It allows marketing teams to segment audiences based on their consent history

Answer

It is required solely for financial data under Sarbanes-Oxley regulations

Question 4

In the context of cookie consent, what does the ePrivacy Directive require before placing non-essential cookies?

Accepted Answer

Prior informed consent from the user before placing non-essential cookies such as analytics or advertising cookies

Answer

Disclosure of cookie use in the site's terms of service, which users implicitly accept

Answer

Prior informed consent from the user before placing any type of cookie

Answer

Encryption of all cookie data and notification within 72 hours of placement

Question 5

How does the principle of 'purpose limitation' interact with consent management?

Accepted Answer

Purpose limitation means consent obtained for one specific purpose cannot be used to justify processing for a different purpose without new consent

Answer

Purpose limitation allows an organization to reuse consent for any future processing that benefits the user

Answer

Purpose limitation requires deleting data after the initially consented purpose is fulfilled within 30 days

Answer

Purpose limitation is a financial regulation unrelated to privacy consent

Question 6

Which of the following is a lawful basis for processing personal data that does NOT require obtaining consent under GDPR?

Accepted Answer

Processing data that is strictly necessary to fulfill a contract with the data subject

Answer

Sending promotional newsletters to existing customers

Answer

Processing biometric data for employee time tracking

Answer

Sharing personal data with advertising partners for behavioral targeting

Question 7

What is 'dynamic consent' and how does it benefit data subjects in long-term research studies?

Accepted Answer

Dynamic consent allows participants to continuously review, update, or withdraw their consent for specific uses of their data over time via an online platform

Answer

Dynamic consent is a one-time consent that automatically renews every year without user action

Answer

Dynamic consent is consent granted by a data subject's attorney that adapts to regulatory changes

Answer

Dynamic consent is a machine-learning model that predicts whether a user would consent to a new data use