Exam CIPP-US topic 1 question 23 discussion

“no consumer choice,” or “no option,” is expected in a range of situations. The 2010 preliminary FTC staff report, Protecting Consumer Privacy in an Era of Rapid Change, called these situations “commonly accepted practices.” In such situations, an organization has been given implied authority to share personal information. For example, a consumer who orders a product online expects their personal information to be shared with the shipping company, the credit card processor, and others who are engaged in fulfilling the transactions. The consumer does not expect to have to sign an opt-in or be offered an opt-out option for the shipping company to learn the address. In addition to product fulfillment, other examples provided by the FTC include “internal operations such as improving services offered, fraud prevention, legal compliance and First-party marketing” by the seller to the customer

Should be D. When a customer’s street address is shared with a shipping company If the shipping company has to deliver the parcel, there is no option / no choice to opt-out and no further consent is required...

The shipper is given access to the data needed to complete the transaction, so the buyer (you) give implied consent to the shipper when buying on Amazon (be it Amazon that ships or a 3rd party that does the service that is implied in the contract of buying online to be shipped to your house).

“For example, a consumer who orders a product online expects their personal information to be shared with the shipping company, the credit card processor, and others who are engaged in fulfilling the transactions. The consumer does not expect to have to sign an opt-in or be offered an opt-out option for the shipping company to learn the address” Excerpt From IAPP_US_TB_US-Private-Sector-Privacy-3E_1.0