NEW
Font size
Worksheetsxyxtq_BSIT3202ME
Total questions: 40
Worksheet time: 53mins
You recently updated your website’s terms and added new restrictions, but didn’t notify users. A user complains about being unaware of the changes.
What clause would allow you to legally make updates to your terms without prior notice?
Acceptance of Terms
Governing Law and Jurisdiction
Right to Modify Terms
User Responsibilities
Your website allows users to post reviews. One user begins posting offensive and harmful content.
Which clause in your terms and conditions gives you the right to moderate or remove such content?
Acceptance of Terms
Prohibited Actions
User Contribution Clause
Termination Clause
Jane runs a wellness blog that provides tips on nutrition and fitness. One of her readers follows a diet plan from her blog and ends up feeling unwell. The reader now wants to sue Jane for health damages.
Which clause in her website’s terms and conditions could best protect Jane in this situation?
Privacy Policy Clause
Intellectual Property Rights Clause
Disclaimer Clause
Governing Law Clause
Your website features custom graphics and unique written content. Another website copies and republishes your material without permission.
Which part of your terms and conditions helps you address this issue legally?
User Responsibilities
Intellectual Property Rights
Account Creation
Cookie Policy
A customer buys a digital product from your website and asks for a refund after using it. They claim the return policy wasn’t clear.
Which clause should have been clearly outlined in your terms and conditions to avoid this confusion?
Return/Refund Policy Clause
Right to Modify Terms Clause
Prohibited Actions Clause
Liability Limitations Clause
Your website uses tracking cookies for personalized ads. A user in the EU complains that they were not informed.
Which clause should your website include to address this properly?
Account Creation Clause
Cookie Policy Clause
Disclaimers
Limitation of Liability
A user in another country sues your business over a transaction issue. You want the case to be handled in your local courts.
Which clause supports your right to handle legal disputes in your jurisdiction?
Disclaimers
Governing Law and Jurisdiction
Termination Clause
Privacy Policy
Jacob runs a news site that uses cookies for login sessions and third-party advertising. His cookie policy explains what cookies are, how users can manage them, and offers contact details for further inquiries. However, the policy hasn’t been updated in three years.
What is the main compliance risk in Jacob’s current cookie policy?
Lack of third-party cookie usage
Outdated policy information
Missing a security breach clause
No social media links in the footer
Mark is designing a cookie policy for his website. He includes a clear title, the last update date, and a section explaining how users can disable cookies in their browser. However, he forgets to include the types of cookies his website uses and how long they last.
What key element is missing from Mark's cookie policy?
A disclaimer limiting liability
A cookie lifespan and type breakdown
A user comment section
A refund policy
A user contacts a fashion website requesting to delete their personal data. The site responds with clear steps and fulfills the request.
Which user right under privacy laws is being exercised here?
Right to object to marketing
Right to data portability
Right to be forgotten
Right to access analytics
A travel website's privacy policy mentions sharing data with booking partners, law enforcement when required, and during mergers or acquisitions. It assures users that data is never sold.
What aspect of data handling is being addressed?
Data minimization
Cookie duration
Third-party data sharing
Consent expiration
Noah’s app gathers location data, app usage behavior, and email addresses. His privacy policy explains that the data helps improve the app, personalize features, and process purchases.
Which element is Noah addressing by including this explanation?
Data retention schedule
Reasons for data collection
Contact procedures
Legal disclaimers
Ella updates her e-commerce site’s privacy policy to reflect new data-sharing practices. She adds a line at the end saying “Last Updated: April 10, 2025.”
Why is this inclusion important?
It helps track customer purchases
It shows users when changes were made
It provides legal immunity
It is required to enable customer reviews
Liam reads a privacy policy on a tech blog that says the site uses encryption, restricts access to sensitive information, and performs regular audits.
Which essential element of the privacy policy is this addressing?
Data usage practices
Third-party sharing rules
Security measures
Cookie duration
A parent discovers their child registered on a gaming website without permission and submitted personal information. The website's privacy policy states that it complies with Children's Online Privacy Protection Act (COPPA).
What should the parent be able to do according to the policy?
Pay a fee to access their child's data
Contact the website to delete or manage the data
Wait 30 days for data to be automatically erased
Approve data sharing through email
Maria just launched an online skincare store. She includes a privacy policy that lists the data she collects, such as names, emails, and payment info. However, she forgets to explain how long she retains this data.
Which essential element is missing from her privacy policy?
User consent withdrawal process
Cookie management guide
Data retention period
List of affiliate partners
Jake launches a fitness app that uses forms, cookies, and third-party payment processors to gather data. His privacy policy doesn’t mention how this data is collected.
What critical component is missing?
Security certifications
Methods of data collection
Refund policy
Email contact
What is the purpose of a privacy policy on a website?
To increase ad revenue
To outline the return policy
To ensure transparency in handling user data
To encourage users to share more data
Which of the following is a user right under data protection laws?
Right to be promoted
Right to modify their internet bill
Right to access, delete, or update their data
Right to access other users’ data
How should users be informed of updates to a privacy policy?
No need to inform them
Through email, banners, or website announcements
By changing the policy in secret
During checkout only
What is the purpose of including an “Effective Date” and “Last Updated” date in a privacy policy?
To track user behavior
To satisfy HR requirements
To inform users of when the policy came into effect or changed
To calculate marketing campaign success
Which of the following best describes cookies in the context of websites?
Digital malware programs
Small text files that store user data on the browser
Pop-up ads used for marketing
Audio files for accessibility
What happens to session cookies when a user closes the browser?
They are stored for six months
They are saved to a cloud server
They are deleted immediately
They are transferred to third parties
What should a cookie policy include regarding updates to the document?
The reason for cookie usage
A statement allowing updates without prior notice
A list of privacy laws
The CEO’s approval
Where should you place the link to your cookie policy on your website?
In a blog post
In the website footer
Inside the image gallery
On the 404 error page
What is the purpose of a website’s Terms and Conditions?
To help websites load faster
To provide technical support to users
To set rules and protect the business legally
To describe about the website
Why is it important to update your website’s terms and conditions regularly?
To improve SEO rankings
To ensure they reflect current laws and business practices
To reduce website load time
To attract more visitors
What is one of the benefits of having clear terms on what users can and cannot do on a website?
It helps users log in faster
It reduces the need for customer service
It helps maintain a respectful online environment
It improves web hosting performance
When do users typically accept the website’s terms and conditions?
After they receive a newsletter
When they visit the homepage
By clicking a checkbox or continuing to use the website
By following the website on social media
What should you do before publishing your terms and conditions?
Translate it into multiple languages
Post it on social media
Review for accuracy and legal compliance
Send it to all users by text message
One major benefit of PETs is their alignment with which principle of modern data protection?
Profit maximization
Data centralization
Privacy-by-design
Open data policy
Which of the following PETs adds noise to datasets to obscure individual identities?
Confidential Computing
Differential Privacy
Homomorphic Encryption
Federated Learning
What is a potential risk associated with Privacy-Enhancing Technologies?
Inability to process data
Total data transparency
Misconfiguration leading to exposure
Increased server uptime
Which PET is most suitable for sharing health data while preserving privacy?
Federated Learning
Homomorphic Encryption
Synthetic Data
Confidential Computing
In federated learning, where is the training of AI models conducted?
On a central cloud server
Locally on user devices or nodes
On encrypted email systems
In confidential data centers
How does confidential computing protect data?
By decentralizing data storage
By using blockchain technology
Through secure enclaves that isolate data during processing
By deleting original data after access
Which PET allows computations to be performed on encrypted data without decryption?
Federated Learning
Confidential Computing
Homomorphic Encryption
Synthetic Data
A tech company implements homomorphic encryption to protect customer data but fails to update its keys and configurations properly. What risk is most likely in this case?
Incompatible software licenses
Public exposure of raw data
Decrease in data quality
Unfair pricing models
An organization relies heavily on PETs and assumes it no longer needs traditional cybersecurity measures. What is a key risk in this scenario?
PETs may delete data automatically
Over-reliance may weaken overall security
PETs prevent lawful data sharing
PETs increase infrastructure costs
What is the goal of Privacy-Enhancing Technologies (PETs)?
To replace traditional cybersecurity tools
To increase website viewers
To protect sensitive data while maintaining usability
To anonymize all user data
