Exam CAS-004 topic 1 question 289 discussion

Well, the question did say online retailer is domestic. GDPR protects individuals when they are located within the EU. If the customer resides in the US, GDPR protections do not apply to their data. GDPR applies only if the processing of personal data relates to: - Individuals located in the EU, irrespective of their citizenship. - Offering goods or services specifically targeting people in the EU. - Monitoring the behavior of people when they are in the EU.

There is nothing related to European customers about the retailer. AD is poses a risk not just to European customers.. Both AD can contain PII.

AD, shipping address is a customer protected data. https://shopify.dev/docs/apps/launch/protected-customer-data

The two types of data that pose the greatest risk in this scenario are: A. Financial data from transactions: This type of data is highly sensitive as it can include credit card numbers, bank account details, and other financial information. If this data were to be breached, it could result in significant financial loss for the customers and potential legal consequences for the company. C. Data of possible European customers: If the company has European customers, it must comply with the General Data Protection Regulation (GDPR), which has strict rules about the handling of personal data. Non-compliance can result in hefty fines. So, the correct answers are A. Financial data from transactions and C. Data of possible European customers. These types of data require careful handling to minimize risk and ensure compliance with relevant regulations.

Leaning AC

A. Financial data from transactions C. Data of possible European customers Financial data from transactions: Due to its sensitivity and potential for financial fraud. Data of possible European customers: Due to the regulatory implications of GDPR. D. Customers' shipping addresses option is correct also but it's not greater risk compare to GDPR regulation.

A, but only C due to compliance. D, which is PII seems very enticing, and a bit more encompassing, but I assume the hints are towards GDPR.

AC should be the correct answers

I believe AC to be correct.