CIPP-E > Important Technology Concepts > Flashcards

Important Technology Concepts Flashcards

Familiarize yourself with key technological terms and concepts that impact data protection and privacy compliance. (42 cards)

Study These Flashcards
1
Q

What is cloud computing?

A

On-demand access to computing resources hosted on another computer.

Examples: Amazon Web Services (AWS) or Google Cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the advantages of cloud computing?

A
  • Cost savings
  • Scalability
  • Ease of management
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the 3 main cloud computing models?

A
  • Infrastructure as a Service (IaaS)
  • Platform as a Service (PaaS)
  • Software as a Service (SaaS)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is Infrastructure as a Service?

(IaaS)

A
  • Physical infrastructure provided by a third party
  • Full control by subscriber
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Platform as a Service?

(PaaS)

A
  • Development platform provided to build applications
  • Mostly used by developers
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is Software as a Service?

(SaaS)

A
  • Web-based applications accessed online
  • Managed by a third party
  • Typically no download required
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What must a cloud contract include according to GDPR?

A
  • Processing description
  • Confidentiality
  • Security
  • Breach notification
  • DSR/DPIA support
  • Data deletion
  • Audits
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are additional cloud service requirements beyond the contract?

A
  • Customer assurance of compliance
  • Indemnification for misuse
  • Shielding provider from customer obligations
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the EU Cloud Code of Conduct?

A
  • A DPA-approved framework for B2B cloud processors
  • Not valid for B2C or third-country transfers
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What information must users be given about cookies?

A
  • Expiration date
  • Third-party access
  • Processing purpose
  • Controller identity
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the difference between first-party and third-party cookies?

A
  • First-party: set by website operator
  • Third-party: set by external entity

Each is a controller.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is an IP address?

A
  • A unique numerical label assigned to every device on a network
  • Allows data routing
  • Can reveal ISP and location
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the 2 types of IP addresses?

A
  • Static (does not change)
  • Dynamic (changes periodically)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Why can an IP address be considered personal data?

A

Because it can be combined with other data to identify an individual.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is a search engine?

A

A software tool that helps users find information by searching and indexing web pages and other content.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What types of data are processed by search engines?

A
  • IP address, cookies
  • User logs (e.g., search history, ad clicks)
  • Indexed sites
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is social media?

Study These Flashcards
A

An interactive online platform allowing users to create, share, and engage with content and connect with others.

18
Q

Who are the key actors in SMP controllership according to EDPB Guidelines 08/2020?

Study These Flashcards
A
  • Social media platforms
  • Third-party service providers
  • Advertisers
  • Users
19
Q

When does the GDPR household exemption not apply to SMP users?

Study These Flashcards
A

When content is uploaded on behalf of an organization or access is knowingly extended beyond selected contacts.

20
Q

What are the obligations of joint controllers on social media platforms?

Study These Flashcards
A
  • Define responsibilities
  • Share information
  • Inform data subjects of the essence of the arrangement
21
Q

What does the EDPB recommend regarding data subject access on SMPs?

Study These Flashcards
A

Data subjects should have direct, remote access to their personal data.

22
Q

What does GDPR Article 8(1) require for processing children’s data?

Study These Flashcards
A

Parental consent for children under 16.

Or lower, down to 13, depending on member state

23
Q

What is the UK’s Children’s Code?

Study These Flashcards
A
  • The Age-Appropriate Design Code
  • Sets data protection and design standards for services targeting children
24
Q

How does targeted online advertising work?

Study These Flashcards
A

It aggregates user behavior data to:

  • Identify patterns
  • Build profiles
  • Infer traits
  • Predict future behaviors
25
Who are **typical actors** in the **adtech ecosystem**?
* Advertisers * Publishers * Ad platforms * Demand-side and supply-side platforms * Data management * Analytics companies
26
What is a **major notice challenge** in targeted advertising?
Many adtech companies **lack direct relationships** with data subjects.
27
What measures can help **support legitimate interest** in a balancing test?
* Transparency * Data subject rights * Data quality * Opt-out options * Conducting a DPIA
28
How do advertisers **circumvent cookie limitations** in mobile apps?
* They collect **MAC addresses** * Use **device fingerprinting** to profile users across datasets
29
Who are the typical **parties** in the **mobile app ecosystem**?
* App developers * Software hosts * Data analytics providers * Ad providers
30
What is the **Internet of Things**? | (IoT)
A network of **connected physical objects with sensors** and connectivity that exchange data over the internet.
31
When do **ePrivacy rules** apply to **IoT devices**?
When a **service stores or accesses information in IoT devices**, which are considered terminal equipment.
32
What are examples of **IoT terminal equipment**?
* Voice assistants * Smart cars
33
What are ways to **provide notice** with IoT devices?
* Lights * Connected apps/accounts * Email during registration * Voice-based interface
34
When is **contractual necessity** a valid legal basis for IoT data collection?
When data collection is **an intrinsic and expected element** of the service or device.
35
What are **key security challenges** of IoT according to the EDPB?
* Large attack surface * Difficulty updating/patching many devices * Unauthorized access (e.g., voice activation)
36
What is **artificial intelligence** (AI) as defined by **the EU AI Act**?
A machine-based system that **infers how to generate outputs** to influence environments **based on received inputs**.
37
How does AI work?
Uses machine learning: * Choose a model * Train it with data * Generate outputs from inputs
38
What does the EDPB say about contract and consent as **legal bases for AI**?
* Contract: not valid for service improvement * Consent: valid but must allow withdrawal
39
What does the EU AI Act Article 10(5) allow regarding **special category data**?
Processing for the purpose of **detecting and correcting bias**.
40
When was the EU AI Act enacted and what is its approach?
* Enacted **August 2024** * Uses a risk-based framework with **four risk levels**
41
What are the **4 risk levels** under the **EU AI Act**?
1. Unacceptable/prohibited 2. High 3. Limited 4. Minimal
42
What are examples of AI systems posing **unacceptable risk**?
* Social scoring * Behavioral manipulation * Emotion recognition in schools/workplaces * Predictive policing * Exploitative targeting * Untargeted facial scraping * Biometric categorization/ID by law enforcement
CIPP-E
flashcards
Decks in class (11)
# Cards
Brainscape helps you reach your goals faster, through stronger study habits.
© 2026 Bold Learning Solutions. Terms and Conditions