Exam CIPP-US All QuestionsBrowse all questions from this exam
Go to Exam
Question 32

SCENARIO -

Please use the following to answer the next question:

Matt went into his son’s bedroom one evening and found him stretched out on his bed typing on his laptop.

“Doing your homework?” Matt asked hopefully.

“No,” the boy said. “I’m filling out a survey.”

Matt looked over his son’s shoulder at his computer screen. “What kind of survey?”

“It’s asking questions about my opinions.”

“Let me see,” Matt said, and began reading the list of questions that his son had already answered. “It’s asking your opinions about the government and citizenship. That’s a little odd. You’re only ten.”

Matt wondered how the web link to the survey had ended up in his son’s email inbox. Thinking the message might have been sent to his son by mistake he opened it and read it. It had come from an entity called the Leadership Project, and the content and the graphics indicated that it was intended for children. As Matt read further he learned that kids who took the survey were automatically registered in a contest to win the first book in a series about famous leaders.

To Matt, this clearly seemed like a marketing ploy to solicit goods and services to children. He asked his son if he had been prompted to give information about himself in order to take the survey. His son told him he had been asked to give his name, address, telephone number, and date of birth, and to answer questions about his favorite games and toys.

Matt was concerned. He doubted if it was legal for the marketer to collect information from his son in the way that it was. Then he noticed several other commercial emails from marketers advertising products for children in his son’s inbox, and he decided it was time to report the incident to the proper authorities.

How does Matt come to the decision to report the marketer’s activities?

    Correct Answer: C

    Matt decided to report the marketer's activities because it appears that the marketer collected and possibly distributed his son's personal information without parental consent. According to the Children’s Online Privacy Protection Act (COPPA), operators of web sites or online services directed to children under 13 must obtain verifiable parental consent before collecting, using, or disclosing personal information from a child. Since Matt's son was asked to provide personal information such as his name, address, telephone number, and date of birth without Matt's consent, this clearly indicates a violation of COPPA rules, prompting Matt to take action.

Discussion
LisawoodOption: C

Te answer is C. Must obtain parental consent.

BoatsOption: A

Make reasonable efforts (taking into account available technology) to provide direct notice to parents of the operator's practices with regard to the collection, use, or disclosure of personal information from persons under 13, including notice of any material change to such practices to which the parents have previously consented;

jjjrbmOption: C

Answer is C

Supp2023Option: A

A is the best option here, because we don't know if the other commercial emails were a result of distribution from this particular marketer. A is likely the best choice here.

examdj101jOption: C

C is a specific violation of COPPA, A is vague and can mean a lot of different things, so I am going with C on this one.

BhimeshOption: C

C. The marketer seems to have distributed his son’s information without Matt’s permission The COPPA Rule, 16 CFR part 312, issued pursuant to the Children’s Online Privacy Protection Act (‘‘COPPA’’ or ‘‘COPPA statute’’), 15 U.S.C. 6501 et seq., became effective on April 21, 2000. The Rule imposes certain requirements on operators of Web sites or online services directed to children under 13 years of age, and on operators of other Web sites or online services that have actual knowledge that they are collecting personal information online from a child under 13 years of age (collectively, ‘‘operators’’). Among other things, the Rule requires that operators provide notice to parents and obtain verifiable parental consent prior to collecting, using, or disclosing personal information from children under 13 years of age

examdj101j

I agree, Matt states that his son received more emails from marketers advertising products to him.

fdnsupOption: C

Answer C "adequate attempt" is not enough under COPPA the parent needs to provide his consent