What is a Gramm-Leach-BIiley Act (GLBA) financial privacy rule that presents a threat to data privacy?
Answer(s): C
The Financial Privacy Rule of the Gramm-Leach-Bliley Act (GLBA) allows consumers to control how their personal financial information is shared through an opt-out mechanism.Why is "Opt-Out" a Threat to Data Privacy?The opt-out model assumes that consumers consent to having their data shared unless they take action to refuse.Many consumers may not be aware of their right to opt-out, leading to widespread data sharing without explicit consent.This is less privacy-protective than an opt-in model, where consumers must actively give permission before their data is shared.Why Not the Other Options?A . Opt-in This would enhance privacy, not threaten it.B . Safeguard Refers to data security, not data-sharing policies.D . Pretexting Involves fraudulent access to financial data, which is a different issue.Thus, the correct answer is C. Opt-out, as it weakens consumer privacy protections by allowing data sharing unless the consumer takes action.Reference in Ethics in Technology:Gramm-Leach-Bliley Act (1999), 15 U.S.C. §§ 6801-6809.Federal Trade Commission (FTC) Guide to GLBA Opt-Out Provisions.Nissenbaum, H. (2010). Privacy in Context: Technology, Policy, and the Integrity of Social Life.
Which principle, according to the Organisation for Economic Co-operation and Development's (OECD) privacy guidelines, states that people have the right to review their data, challenge its correctness, and have incorrect data changed?
Answer(s): A
The OECD Privacy Guidelines establish principles for protecting personal data, and Individual Participation is the principle that grants individuals the right to:Access their personal dataChallenge incorrect dataRequest corrections to inaccurate informationThis ensures transparency and gives individuals control over their own information.Why Not the Other Options?B . Purpose Specification Requires data collection to have a clear, specific purpose, but does not grant individuals the right to review their data.C . Use Limitation Limits how collected data can be used but does not focus on individual rights.D . Security Safeguard Ensures data protection measures but does not relate to individuals reviewing their data.Thus, the correct answer is A. Individual participation, as it upholds the right to access and correct personal information.Reference in Ethics in Technology:OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data (1980, updated 2013).General Data Protection Regulation (GDPR) (2018), Articles 15-16.Solove, D. J. (2020). Understanding Privacy. Harvard University Press.
An organization gathers data using various technologies to optimize sales processes for its current and prospective customers. The data consists of demographic, geographic, and behavioral customer changes.Which data collection method is the organization using?
Answer(s): D
Consumer profiling is the practice of collecting and analyzing consumer data--including demographic, geographic, and behavioral attributes--to optimize sales strategies, enhance marketing efforts, and personalize customer experiences.In this scenario, the organization gathers various types of customer data to improve its sales processes, which is a clear example of consumer profiling rather than surveillance or workplace monitoring.Relevant Ethical Reference in Technology:Privacy and Data Ethics (GDPR, CCPA) Consumer profiling raises ethical concerns about informed consent, transparency, and data protection.Big Data Ethics (Tene & Polonetsky, 2012) Ethical consumer profiling must ensure fair use, avoidance of bias, and non-discriminatory practices.Utilitarian vs. Deontological Perspectives While profiling improves customer experiences, it must not violate privacy rights or enable unethical targeting.ACM Code of Ethics Encourages responsible collection, use, and protection of consumer data.Thus, since the company is gathering consumer data to optimize sales, the correct answer is D.Consumer profiling.
An organization collects data in aggregate format about its employees to improve workflow. Managers at the organization must ensure that the data collected is for business purposes only. Which data collection method should the organization implement?
Workplace monitoring refers to the collection and analysis of employee data to improve workflow efficiency, productivity, and business operations. It involves tracking metrics such as work hours,system usage, and productivity patterns--all while ensuring the data is used strictly for business purposes.Relevant Ethical Reference in Technology:Workplace Privacy Ethics Ethical monitoring should balance business needs with employee privacy rights.Surveillance Ethics (Foucault, 1975) Excessive monitoring could violate employee autonomy, making ethical boundaries crucial.Corporate Governance & Employee Rights (ISO 27001, GDPR) Transparency and consent are required when monitoring employee data.Deontological Ethics (Kantian Ethics) Treats employees as ends rather than means, ensuring fair workplace practices.Thus, C. Workplace monitoring is the correct answer since the organization collects aggregate employee data to improve workflow.
A malicious hacker takes over several computers via the internet and causes them to flood a target site with high volumes of data queries and other small tasks. Which type of attack is the hacker performing against the target site?
A Denial-of-Service (DoS) attack is a cyberattack in which a hacker floods a target system with an overwhelming amount of requests, causing it to crash, slow down, or become unavailable. In this scenario, the hacker takes over multiple computers and forces them to flood a target site, which is a Distributed Denial-of-Service (DDoS) attack, a more advanced form of DoS.Relevant Ethical Reference in Technology:Cybersecurity Ethics (ACM & IEEE Codes of Ethics) DoS attacks violate ethical and legal principles, causing harm to organizations and users.Hacking Ethics (White Hat vs. Black Hat Ethics) Ethical hackers prevent DoS attacks, whereas malicious hackers exploit vulnerabilities.Cybercrime Laws (Computer Fraud and Abuse Act, GDPR, CFAA) DoS attacks are illegal and punishable under international cybersecurity laws.Utilitarian Perspective on Cybersecurity Defending against DoS attacks protects public and private digital infrastructure, benefiting society.Thus, the correct answer is C. Denial-of-service (DoS), as the hacker floods the target site with excessive data queries.
Post your Comments and Discuss WGU Ethics-In-Technology exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the Ethics-In-Technology content, but please register or login to continue.