Question 1 of 30
A company based in the European Union collects personal data from users in both the EU and California. They are developing a new marketing strategy that involves sharing this data with third-party vendors for targeted advertising. Considering the implications of the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), which of the following actions should the company prioritize to ensure compliance with both regulations?
Implement a clear consent mechanism that allows users to opt-in for data sharing and provides detailed information about how their data will be used.
Rely on implied consent based on user activity on the website, assuming users understand the data usage policies.
Share the data with third-party vendors without notifying users, as long as the vendors are reputable.
Only comply with GDPR, as CCPA does not apply to users outside California.

Preparing for SalesForce Certified Business Analyst Certified Business Analyst? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free