Question 13
Domain 2: Privacy Risk ManagementA smart-city kiosk infers age range and mood from passersby to decide which promotions to display. What is the GREATEST privacy concern?
Correct answer: B
Explanation
Inferring age range and mood creates sensitive profiles from observed behavior, which can be used to tailor promotions in ways the person never knowingly consented to. The greatest privacy concern is that "inferred traits can enable discriminatory or manipulative treatment without the individual's awareness," because the kiosk is making decisions based on hidden profiling rather than explicit data provided by the passerby.
Why each option is right or wrong
A. The display may consume too much battery power
B. Inferred traits can enable discriminatory or manipulative treatment without the individual's awareness
Under GDPR Article 4(4), this is profiling: any automated analysis of personal aspects to evaluate or predict behavior, preferences, or mood. The privacy risk is not mere observation, but that inferred attributes can be used to target or exclude people in ways they cannot see or contest, engaging fairness and transparency concerns in Articles 5(1)(a) and 12–14, and potentially Article 22 if the profiling produces similarly significant effects.
C. The kiosk might need a larger screen
D. The promotions may reduce advertising revenue