Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam CIPP-E All Questions

View all questions & answers for the CIPP-E exam

Exam CIPP-E topic 1 question 188 discussion

Actual exam question from IAPP's CIPP-E
Question #: 188
Topic #: 1
[All CIPP-E Questions]

SCENARIO -
Please use the following to answer the next question:
ABC Hotel Chain and XYZ Travel Agency are U.S.-based multinational companies. They use an internet-based common platform for collecting and sharing their customer data with each other, in order to integrate their marketing efforts. Additionally, they agree on the data to be stored, how reservations will be booked and confirmed, and who has access to the stored data.
Mike, an EU resident, has booked travel itineraries in the past through XYZ Travel Agency to stay at ABC Hotel Chain’s locations. XYZ Travel Agency offers a rewards program that allows customers to sign up to accumulate points that can later be redeemed for free travel. Mike has signed the agreement to be a rewards program member.
Now Mike wants to know what personal information the company holds about him. He sends an email requesting access to his data, in order to exercise what he believes are his data subject rights.
What are ABC Hotel Chain and XYZ Travel Agency’s roles in this relationship?

  • A. ABC Hotel Chain is the controller and XYZ Travel Agency is the processor.
  • B. XYZ Travel Agency is the controller and ABC Hotel Chain is the processor.
  • C. ABC Hotel Chain and XYZ Travel Agency are independent controllers.
  • D. ABC Hotel Chain and XYZ Travel Agency are joint controllers.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Ssourav
3 months, 3 weeks ago
Selected Answer: D
D. ABC Hotel Chain and XYZ Travel Agency are joint controllers. Given that ABC Hotel Chain and XYZ Travel Agency jointly determine the purposes and means of processing customer data, they would be considered joint controllers under the GDPR. This relationship involves shared decisions on data storage, reservation bookings, and data access, indicating their joint responsibility for the data processing activities.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...