CWA Privacy & Ethical Considerations 2

Question 1

Under the GDPR, which lawful basis is generally required before setting non-essential analytics cookies?

Accepted Answer

Explicit, opt-in consent

Answer

Under ePrivacy and GDPR rules, non-essential cookies need freely given, informed opt-in consent.

Question 2

What key right does the CCPA/CPRA give California consumers regarding their data?

Accepted Answer

Right to opt out of the sale or sharing of their personal information

Answer

CCPA/CPRA lets consumers opt out of the sale or sharing of personal information.

Question 3

What is the maximum fine for the most serious GDPR violations?

Accepted Answer

€20 million or 4% of global annual turnover, whichever is higher

Answer

The upper tier is €20M or 4% of worldwide annual turnover, whichever is greater.

Question 4

When a company uses a web analytics vendor to process visitor data on its behalf, what is the vendor's typical GDPR role?

Accepted Answer

Data processor

Answer

A vendor processing data on the company's instructions is a processor, and the company is the controller.

Question 5

How long does a controller generally have to respond to a GDPR data subject access request?

Accepted Answer

One month

Answer

GDPR requires a response without undue delay and within one month, extendable in complex cases.

CWA - Certified Web Analyst Practice Test