CIPP-US Exam QuestionsBrowse all questions from this exam

CIPP-US Exam - Question 149


Chanel Hair Studio is a busy high-end hair salon. In an effort to maximize efficiency of its operations and reduce wait times for appointments, Chanel decides to implement artificial intelligence software that will use client profiles and history to predict which clients will likely be late for their appointments. Information used to create the client profile included appointment history, distance from the salon, and any references to being tardy pulled from the client’s social media accounts. If a client is predicted to be late, their appointment will be cancelled within 5 minutes.

Based on the details, what is the biggest potential privacy concern related to Chanel’s use of this new software?

Show Answer
Correct Answer: A

The biggest potential privacy concern is scanning a client’s social media accounts to use in a client profile without notice to the client. Social media content often contains personal and potentially sensitive information, and using this data without the client's consent or knowledge can violate their privacy expectations and potentially lead to significant issues of trust and data misuse.

Discussion

3 comments
Sign in to comment
smp175Option: B
Jul 6, 2023

Permissibility of A would depend on the social media terms of use. Based on the details given here, the best answer is B. We do not know whether the salon even has a privacy policy. Therefore, absent any express terms to the contrary, use of the client profile information in the manner likely exceeds the scope of any implied consent.

[Removed]Option: A
Jul 28, 2023

I agree with A.

Ambulocetus
Aug 20, 2023

Using information from a client's social media accounts to create a client profile without obtaining proper notice or consent raises significant privacy issues. Social media content often contains personal information that individuals may not expect to be used by a hair salon for appointment scheduling purposes. Additionally, using this information without the client's awareness or consent could violate their privacy expectations and potentially lead to a breach of trust.

BhimeshOption: B
Apr 12, 2024

Agree with smp175