CIPM CIPM Consent Management 1

Question 1

Under GDPR, which conditions must ALL be met for consent to be considered lawful?

Accepted Answer

Consent must be freely given, specific, informed, and unambiguous

Answer

GDPR Article 7 requires valid consent to be freely given, specific, informed, and unambiguous, typically demonstrated through a clear affirmative act.

Question 2

What does 'freely given' consent mean in the GDPR framework?

Accepted Answer

Consent not conditioned on a service unless processing is necessary for that service

Answer

Freely given consent means there is no power imbalance and service delivery is not conditioned on consent to processing that is unnecessary for that service.

Question 3

Under GDPR, how must consent be obtained to process children's data for information society services?

Accepted Answer

Parental or guardian consent for children under 16 (or lower national threshold)

Answer

GDPR requires parental or guardian consent for children under 16 for information society services, though member states may lower this threshold to 13.

Question 4

What is the primary purpose of a Consent Management Platform (CMP)?

Accepted Answer

To collect, store, and manage records of user consents

Answer

A CMP helps organizations obtain, record, and manage user consents, enabling them to demonstrate compliance and honor consent withdrawal requests.

Question 5

Under GDPR, can consent be used as a valid legal basis when there is a significant power imbalance between controller and data subject?

Accepted Answer

No, because consent cannot be considered freely given in such situations

Answer

When a clear power imbalance exists, such as between an employer and employee, consent is generally not considered freely given and thus is not a valid legal basis.

CIPM - Certified Information Privacy Manager Practice Test

CIPM - Certified Information Privacy Manager Practice Test

CIPM CIPM Consent Management 1