Ethics, Law, Privacy and Advertising Governance

Introduction

Advertising is not merely a system for attracting attention and stimulating demand. It is also a system of representation, persuasion, data collection, cultural influence and institutional accountability. Because advertising can affect economic choices, political beliefs, identity, privacy and public welfare, it is governed by overlapping ethical standards, laws, industry codes and organizational controls.

For advertising and media managers, compliance is therefore not a narrow legal exercise. A campaign may be technically lawful yet misleading, exploitative, culturally harmful or inconsistent with the organization’s stated values. Conversely, an ethically responsible campaign may still fail because it infringes copyright, lacks valid consent or makes claims that cannot be substantiated. Professional practice requires the integration of law, ethics, risk management, consumer protection, privacy engineering and governance.

This chapter examines truthfulness, representation, vulnerable audiences, intellectual property, endorsements, dark patterns, political advertising, privacy, consent and responsible data use. It treats governance as a management capability: the structured process through which organizations establish standards, allocate responsibility, assess risk, monitor performance and provide remedies.

Learning Objectives

By the end of this chapter, students should be able to:

1. Distinguish ethical principles, legal rules, industry codes and organizational policies.
2. Evaluate advertising claims for truthfulness, substantiation, clarity and materiality.
3. Analyse representation, vulnerable audiences, endorsements and influencer disclosures.
4. Explain the main intellectual-property risks in advertising production and distribution.
5. Identify dark patterns and assess their implications for consumer autonomy.
6. Explain the privacy lifecycle from data collection to deletion.
7. Apply consent, purpose limitation, data minimization and accountability principles.
8. Design a practical advertising-governance framework for campaigns, platforms and agencies.
9. Critically assess political advertising and emerging AI-related risks.

1. The Normative Architecture of Advertising

Advertising is regulated through four partly overlapping layers.

These layers are related but not interchangeable. Law commonly sets a minimum threshold; ethical practice may demand more. Industry codes can clarify ambiguous legal concepts such as misleading impression, offensive representation or responsible targeting. Organizational policies translate external expectations into operational controls.

A useful governance principle is that responsibility follows influence. Advertisers, agencies, media owners, platforms, data brokers, creators and technology vendors may each control different parts of a campaign. Contracts should allocate duties, but contractual allocation does not always eliminate legal or ethical responsibility. A brand cannot automatically avoid accountability by blaming its agency or data supplier.

1.1 Core ethical principles

Several principles recur across advertising governance:

• Truthfulness: communications should not contain false statements or create materially misleading impressions.
• Transparency: audiences should understand who is communicating, why they are being targeted and when content is sponsored.
• Autonomy: people should be able to make meaningful choices without coercion, deception or unreasonable manipulation.
• Fairness: benefits and burdens should not be distributed through unjust discrimination or exploitation.
• Non-maleficence: campaigns should avoid foreseeable physical, psychological, financial, social and environmental harm.
• Accountability: organizations should be able to explain decisions, evidence compliance and remedy failures.
• Proportionality: the intrusiveness of a practice should be proportionate to a legitimate and sufficiently important objective.

These principles can conflict. Personalization may improve relevance but increase surveillance. Humour may improve recall but reinforce stereotypes. A highly visible disclosure may reduce immediate persuasion but improve informed choice. Governance requires reasoned trade-offs rather than mechanical application of one principle.

2. Truthfulness, Claims and Evidence

A claim is any explicit or implied representation about a product, service, organization or cause. Claims include statements, images, demonstrations, comparisons, prices, testimonials, rankings and omissions. The relevant question is not only whether each sentence is literally accurate, but also what a reasonable audience is likely to understand overall.

2.1 The claim-evidence-audience framework

Before publication, managers should ask:

1. What is the claim? Separate objective claims from obvious opinion or puffery.
2. What impression is created? Consider headlines, visuals, qualifiers, layout and context together.
3. Who is the audience? Children, older people, financially stressed consumers and people with limited literacy may interpret content differently.
4. What evidence exists? Evidence should be reliable, current, relevant to the advertised product and capable of supporting the precise claim.
5. Is the evidence available before dissemination? Post-campaign research cannot usually cure an unsupported claim made at launch.
6. Are limitations material? A qualification is ineffective if it is hidden, inaudible, unreadable or contradicted by the dominant message.

Claims about health, safety, environmental performance, finance, performance superiority and savings generally require especially strong evidence. “Up to” claims, rankings and comparative claims must be constructed so that the typical audience is not misled about likely results.

2.2 Omission and overall impression

Misleading advertising may arise through omission. A product can be accurately described while a material condition—automatic renewal, significant fees, eligibility restrictions, limited stock or unusual usage conditions—is concealed. The standard is often contextual: a disclosure may be technically present but practically ineffective.

A responsible review therefore considers prominence, proximity, duration, contrast, language complexity, audio clarity and the path a consumer must follow to find important information. Fine print is not a universal cure for a prominent misleading message.

2.3 Comparative and environmental claims

Comparative advertising should identify a meaningful basis of comparison. “Best,” “number one” or “leading” claims require a defined category, time period and credible basis. Environmental claims require particular caution because broad expressions such as “green,” “clean” or “carbon neutral” may imply benefits beyond what the evidence supports. Managers should specify the product boundary, measurement method, baseline, time period and relevant qualifications.

3. Representation, Inclusion and Vulnerable Audiences

Advertising contributes to social meaning. Repeated portrayals can normalize whose lives are visible, whose bodies are valued and who is associated with authority, care, danger or dependency. Ethical representation is not achieved merely by counting demographic appearances. It requires attention to role, narrative agency, context, production power and consequences.

3.1 Representation risks

Common risks include stereotyping, tokenism, cultural appropriation, exclusion, sexualization, disability misrepresentation and the use of poverty or trauma as aesthetic material. A diverse casting decision may still be harmful if a group is included only as a comic device or placed in a subordinate role.

A robust review asks:

• Who speaks and who is observed?
• Who benefits from the representation?
• Are cultural symbols used with knowledge and permission?
• Does the creative reproduce harmful associations?
• Have relevant communities participated in review?
• Could the message affect employment, safety, dignity or social status?

Representation is also an organizational issue. Inclusive advertising is weakened when creative teams, research samples and approval groups lack relevant perspectives.

3.2 Vulnerable audiences

Vulnerability may arise from age, cognitive development, disability, illness, financial distress, crisis, language barriers, social exclusion or dependence on an institution. Vulnerability is contextual rather than a permanent characteristic of every member of a group.

Children generally have less ability to recognize commercial intent and evaluate persuasive claims. Advertising directed at children therefore requires stronger limits on data collection, product claims, behavioural prompts, influencer practices and placement. Financial products, gambling, alcohol, health products and weight-related services require heightened safeguards because foreseeable harm may be severe.

The principle of “do not exploit vulnerability” does not prohibit all communication with vulnerable audiences. It requires proportionality, comprehensible information, avoidance of pressure and safeguards appropriate to the risk. Targeting someone because a data system infers grief, addiction or financial desperation is ethically problematic even where the inference is statistically plausible.

4. Endorsements, Influencers and Native Advertising

An endorsement is a statement or performance that consumers are likely to perceive as reflecting the endorser’s opinions, beliefs or experience. The endorsement must represent the endorser’s genuine view and must not make claims the advertiser could not lawfully make directly.

Material connections—including payment, free products, employment, affiliate revenue, equity, discounts or personal relationships—should be disclosed clearly and near the endorsement. Disclosure language should be understandable to the intended audience. Vague labels such as “collab” or “thanks” may not communicate the commercial relationship adequately in every context.

The advertiser should provide guidance, monitor published content and correct or remove non-compliant material. Influencers also have responsibilities, but outsourcing publication does not remove the brand’s governance duties. Automated or AI-generated endorsements create additional concerns: audiences may not know that a person, voice or image is synthetic, and fictional experiences must not be presented as genuine consumer experience.

Native advertising and sponsored editorial content require clear separation between independent content and paid communication. Visual design, labels, placement and user journey should not deliberately blur the distinction.

5. Intellectual Property in Advertising

Advertising uses words, photographs, music, typefaces, illustrations, software, film, trademarks, locations, performances and personal likenesses. Permission for one use does not necessarily authorize every use, territory, medium, duration or adaptation.

5.1 Copyright

Copyright may protect original literary, artistic, musical, audiovisual and software works. Risks include copying a competitor’s image, using music without the correct synchronization and master rights, reproducing stock material beyond the licence, training or prompting generative systems with protected material without authorization, and assuming that publicly accessible content is free to use.

A production file should record the rights holder, licence scope, media, territory, term, exclusivity, edits, paid-media rights and renewal date. Moral rights, performer rights and collective licensing requirements may also apply depending on jurisdiction.

5.2 Trademarks, personality and publicity rights

A trademark can be infringed or diluted when branding creates confusion, falsely suggests sponsorship or weakens a distinctive mark. Comparative advertising may refer to a competitor under lawful conditions, but it must be accurate and non-denigrating according to applicable law.

Names, images, voices and likenesses may be protected by privacy, publicity or personality rights. A location release, model release and music licence are separate controls; one document does not substitute for the others.

5.3 Governance controls

Useful controls include a rights-clearance register, approved asset library, contract review, expiration alerts, creator warranties, indemnity analysis and final “chain of title” approval. Fair dealing or fair use exceptions are fact-specific and should not be treated as a routine commercial licence.

6. Dark Patterns and Behavioural Manipulation

Dark patterns are interface or communication designs that steer people toward choices they might not otherwise make, often by exploiting attention, urgency, confusion or default effects. Examples include disguised advertisements, preselected consent, confirmshaming, difficult cancellation, hidden fees, misleading countdowns, repeated prompts and unequal button design.

Persuasion is not automatically manipulation. A useful distinction concerns transparency, deliberative opportunity, reversibility and freedom from coercion. A clear discount deadline may inform choice; a false countdown designed to create panic deceives. A default newsletter subscription may be convenient; burying refusal behind multiple screens undermines meaningful choice.

Managers should test whether users can:

• understand the commercial purpose;
• distinguish advertising from neutral content;
• reject optional processing as easily as accepting it;
• review consequences before committing;
• cancel or withdraw without unreasonable friction; and
• correct errors and obtain help.

Behavioural design should be assessed across the complete journey, not just the landing page. A legally valid checkbox can still be ethically deficient if the surrounding design makes refusal practically impossible.

7. Political Advertising and Public-Interest Communication

Political advertising can inform democratic participation, but it can also mislead voters, suppress participation, exploit sensitive data and distribute different claims to audiences that cannot compare them. Its governance is shaped by election law, constitutional principles, platform policies, political-finance requirements and privacy law, which vary substantially across jurisdictions.

Core governance expectations include:

• clear identification of the sponsor and, where required, funding information;
• accurate and verifiable factual claims;
• records of targeting criteria, spend, impressions and versions;
• controls against foreign interference and prohibited funding;
• heightened review of synthetic media and manipulated audio or video;
• restrictions on targeting based on sensitive political or personal characteristics where applicable; and
• accessible archives that enable public scrutiny.

Political communication raises a special transparency problem: personalization can fragment the public sphere. A campaign may lawfully tailor language to different concerns, but it should not create contradictory factual realities or exploit confidential inferences. Platforms and agencies should distinguish issue advocacy, government information, electoral advertising and commercial brand positioning.

8. Privacy, Consent and Responsible Data Use

Privacy is broader than secrecy. It includes control over personal information, appropriate context, freedom from surveillance, dignity and reasonable expectations. Advertising data may include identifiers, browsing events, location, purchase records, inferred interests, device signals, customer-service interactions and probabilistic profiles.

8.1 The data lifecycle

A responsible data programme governs the full lifecycle:

1. Define the purpose: state the specific business and communication objective.
2. Collect: obtain only data reasonably necessary for that purpose.
3. Record provenance: document source, legal basis, permissions and quality.
4. Use: restrict access and prohibit incompatible secondary uses.
5. Share: assess vendors, onward transfers, contracts and audience expectations.
6. Retain: keep data only for a justified period.
7. Delete or anonymize: make deletion effective across systems where feasible.
8. Respond: provide access, correction, objection, withdrawal and complaint mechanisms where required.

Personal data should not be treated as harmless merely because it is pseudonymized. Re-identification may be possible when datasets are combined. Aggregation reduces risk but does not automatically eliminate it.

8.2 Consent and other lawful bases

Consent is meaningful only when it is informed, specific, freely given, unambiguous and revocable, subject to the requirements of the applicable legal regime. Silence, inactivity, bundled acceptance or a preselected box may not constitute valid consent in many contexts. Consent should identify the controller or responsible organization, purposes, categories of data, relevant sharing and withdrawal method.

Consent is not always the only lawful basis recognized by privacy law. Depending on the jurisdiction, processing may rely on contract, legal obligation, legitimate interests, public task or other grounds. The existence of a lawful basis does not eliminate duties of fairness, transparency, minimization, security or purpose limitation. Nor does a privacy notice transform an unexpected practice into an ethical one.

8.3 Children and sensitive data

Children’s data often requires age-appropriate notices, parental authorization or heightened restrictions. Sensitive data—such as health, biometric, precise location, political, religious or financial information—usually demands stronger justification and controls. Inferences can be sensitive even when the original data is not. A system that infers pregnancy, depression or political affiliation should be governed according to the potential impact of the inference.

8.4 Measurement and identity resolution

Digital advertising often combines first-party data, partner data and platform identifiers. Managers should ask whether identity resolution is necessary, whether consent signals survive transfers, whether measurement can be achieved with less data, and whether frequency management or attribution creates unacceptable surveillance.

Privacy-enhancing approaches may include contextual advertising, aggregation, on-device processing, clean rooms, differential privacy, encryption, access controls and shorter retention. These are risk-reduction techniques, not automatic proof of compliance. Technical architecture must be matched with legal analysis and audience expectations.

9. Governance Frameworks for Advertising Organizations

Governance turns principles into repeatable decisions. A useful operating model has six components.

9.1 Standards and risk taxonomy

The organization should maintain a policy library covering claims, vulnerable audiences, representation, endorsements, intellectual property, privacy, political communication, accessibility, AI and platform rules. Risk should be classified by likelihood, severity, reversibility, scale and affected population. A campaign involving health claims, children and sensitive data should receive more scrutiny than a low-risk brand-awareness message.

9.2 Roles and accountability

A responsibility matrix should identify the accountable business owner, creative lead, legal reviewer, privacy specialist, data owner, media buyer, agency and final approver. The board or senior leadership should receive reporting on significant incidents and systemic risks. “Everyone is responsible” is not an adequate allocation of responsibility; named owners are necessary.

9.3 Review gates

A practical campaign lifecycle includes:

• Brief gate: purpose, audience, data, claims and risk category.
• Concept gate: representation, targeting logic, creative risks and rights plan.
• Evidence gate: substantiation, testing, disclosures and legal basis.
• Production gate: licences, releases, accessibility and vendor controls.
• Launch gate: final impression, placements, suppression lists and approvals.
• Monitoring gate: complaints, delivery, comments, misinformation, drift and incidents.
• Closure gate: retention, rights expiry, learnings and remediation.

9.4 Documentation and auditability

Organizations should preserve claim substantiation, consent records, model documentation, audience definitions, version histories, approvals, contracts, takedown decisions and incident logs. Documentation should be proportionate but sufficient to reconstruct what was decided, by whom, on what evidence and with what safeguards.

9.5 Complaints and remediation

A mature system treats complaints as evidence. It provides accessible channels, triages severity, pauses campaigns when necessary, investigates root causes and offers correction, refund, deletion or other remedy. Corrective action should address both the individual harm and the process failure that enabled it.

10. Artificial Intelligence and Emerging Governance Issues

AI can generate copy, images, video, voice, audience segments, recommendations and optimization decisions. Its risks include hallucinated claims, copyright uncertainty, fabricated testimonials, discriminatory targeting, deepfakes, opaque optimization and the use of personal data in model development.

Governance should require human accountability for high-impact outputs, source and rights checks, provenance records, disclosure of synthetic media where material, testing across relevant demographic groups, prompt and data controls, and a process for correction. Automated optimization should not be permitted to pursue click-through or conversion at the expense of legal or ethical constraints. A system’s performance metric is not a moral objective.

Managers should distinguish three questions: whether an AI output is accurate, whether its use is lawful, and whether deploying it is responsible in context. These questions may produce different answers.

11. Illustrative Case: The “Wellness Reset” Campaign

Background

A fictional direct-to-consumer company, VitaNova, launches a “30-Day Wellness Reset.” Its agency proposes social advertising using health-interest segments, testimonials from influencers, before-and-after images and a countdown timer. The landing page offers a low introductory price that automatically renews at a much higher monthly fee.

Problem

The campaign raises several risks: implied health claims are unsupported; before-and-after results may not be typical; influencer relationships are not clearly disclosed; the countdown resets for each visitor; the renewal condition is visually subordinate; targeting may rely on inferred health information; and the creative uses stock images whose licence excludes paid social advertising.

Analysis

The campaign fails the claim-evidence-audience test because the overall impression suggests predictable transformation without reliable evidence. The timer is a dark pattern because it creates false urgency. The price presentation risks misleading consumers by hiding a material condition. Health-related targeting requires heightened privacy analysis, and the influencers’ commercial connection must be prominent. The asset licence creates an intellectual-property risk independent of the advertising claims.

Approach and solution

VitaNova establishes a cross-functional review involving legal, privacy, creative, media, customer support and an accessibility specialist. It removes unsupported outcomes, replaces testimonials with substantiated and qualified experiences, and conducts evidence review before launch. The timer is removed unless a genuine, consistently applied deadline exists. The renewal price appears beside the introductory price, with affirmative confirmation and an easy cancellation route. Targeting is redesigned around contextual wellness content rather than sensitive inferred conditions. Influencer contracts require clear disclosures, monitoring and takedown rights. New model releases and paid-media licences are obtained.

Outcome

The revised campaign produces a lower initial conversion rate but fewer complaints, refunds and chargebacks. Customer understanding improves in user testing, and the organization can explain its claims, data practices and rights position. The campaign also creates reusable governance controls for future products.

Learning points

The case demonstrates that compliance is not a final legal signature. Risk enters through the brief, audience selection, interface, production assets, contracts and measurement design. Early cross-functional review is usually cheaper and more effective than correction after publication.

12. Managerial Challenges and Limitations

Governance can become bureaucratic, slow creative work or encourage defensive communication. Excessive reliance on checklists may create “compliance theatre,” in which documents exist but decision-makers do not challenge harmful assumptions. Self-regulation may lack independence or enforcement power. Laws differ across jurisdictions, and platform policies can change faster than internal procedures.

There are also measurement limitations. Complaint numbers may underestimate harm because many people do not report. Engagement metrics can reward sensational or manipulative content. Privacy risk assessments may struggle with uncertain future uses, re-identification and cumulative surveillance. Representation audits can quantify visibility without capturing lived experience.

The answer is not to abandon governance but to make it risk-based, evidence-informed and participatory. Organizations should combine legal review with consumer research, red-team testing, community consultation, independent audit and post-launch monitoring. Governance quality is demonstrated by the decisions an organization is willing to change, not merely by the policies it publishes.

Best-Practice Checklist

Before approving a campaign, ask:

1. Is the overall impression truthful for the intended audience?
2. Can every objective claim be substantiated before launch?
3. Are material limitations prominent and comprehensible?
4. Does the creative avoid stereotyping and exploitation?
5. Are vulnerable audiences protected through proportionate safeguards?
6. Are endorsements, sponsorships and synthetic elements clearly disclosed?
7. Are all music, images, performances, trademarks and likenesses cleared?
8. Can users recognize advertising and refuse or cancel without friction?
9. Is the data necessary, proportionate, transparent and appropriately retained?
10. Are roles, approvals, monitoring, complaints and remediation documented?

Chapter Summary

Advertising governance integrates ethics, law, regulation and organizational accountability. Truthfulness concerns overall impression, evidence, material omissions and audience context, not merely literal wording. Representation must be assessed through dignity, agency, inclusion and consequences. Vulnerable audiences require stronger safeguards against exploitation and manipulation.

Endorsements and influencer content require genuine views and clear disclosure of material connections. Copyright, trademark, publicity and licensing rights must be managed across every medium, territory and term. Dark patterns undermine informed choice by using deception, friction or coercive defaults. Political advertising requires sponsor transparency, factual discipline, targeting controls and records that support democratic scrutiny.

Privacy governance covers the full data lifecycle. Consent must be meaningful where relied upon, but a lawful basis does not remove duties of fairness, minimization, security and accountability. AI introduces additional concerns involving accuracy, rights, bias, synthetic media and human responsibility. Effective governance uses risk-based standards, named roles, review gates, documentation, monitoring and remediation. Its purpose is not merely to prevent penalties, but to protect autonomy, dignity, trust and the legitimacy of advertising itself.

Key Terms

Ethics: Principles used to evaluate what ought to be done and what conduct is responsible.

Advertising law: Legal rules governing commercial and, in some contexts, political communications.

Self-regulation: Industry-administered standards and complaint systems operating alongside public law.

Substantiation: Evidence adequate to support an advertising claim before dissemination.

Material omission: Failure to disclose information likely to affect a reasonable audience’s decision.

Vulnerable audience: People whose circumstances reduce their ability to recognize, evaluate or resist persuasion or harm.

Endorsement: A representation likely to be understood as reflecting an endorser’s opinion, belief or experience.

Native advertising: Paid content designed to resemble surrounding editorial or platform content.

Intellectual property: Legal rights protecting creations, brands, performances, identities and related interests.

Dark pattern: A design practice that manipulates or obstructs user choice through deception, pressure or friction.

Political advertising: Paid communication intended to influence political views, participation or electoral outcomes.

Personal data: Information relating to an identified or identifiable person.

Purpose limitation: Restricting data use to specified, explicit and legitimate purposes.

Data minimization: Collecting and using no more personal data than is necessary.

Consent: A voluntary, informed and sufficiently specific indication of agreement to processing or communication.

Pseudonymization: Processing that separates direct identifiers while retaining a possibility of linkage.

Privacy by design: Integrating privacy safeguards into systems and processes from the outset.

Accountability: The duty to take responsibility for decisions and demonstrate compliance.

Synthetic media: Media generated or materially altered by automated or AI systems.

Governance: Structures, roles, policies and processes used to direct, control and review organizational conduct.

Review Questions

Short Answer Questions

1. Why is literal accuracy insufficient for evaluating an advertising message?
2. What makes an endorsement disclosure effective?
3. Identify three common forms of dark pattern.
4. Distinguish data minimization from purpose limitation.
5. Why should an organization maintain a rights-clearance register?

Long Answer Questions

1. Explain how ethics, law, self-regulation and organizational policy interact in advertising governance.
2. Discuss the principal risks of advertising directed at vulnerable audiences and propose safeguards.
3. Analyse the relationship between representation, inclusion and organizational accountability.
4. Explain the data lifecycle and show how consent fits within a broader privacy framework.
5. Evaluate the governance challenges created by AI-generated advertising content.

Analytical / Application Questions

1. A retailer uses a preselected checkbox for marketing, hides automatic renewal below the purchase button and sends personalized discounts to customers inferred to be financially distressed. Analyse the ethical, privacy and consumer-protection issues and propose a redesigned journey.
2. An influencer receives free products and payment but labels a video only with “partner” at the end of a long caption. Assess whether the disclosure is likely to be effective and design a monitoring and remediation plan.
3. A political campaign uses different AI-generated videos for distinct demographic groups, some containing claims unsupported by public evidence. Design a governance process addressing transparency, substantiation, targeting, records and correction.

Multiple Choice Questions with Answers

Question 1

Which statement best describes advertising substantiation?

A. Evidence collected after the campaign has ended

B. Evidence adequate to support a claim before dissemination

C. A creative team’s belief that a claim is persuasive

D. A platform’s estimate of likely audience engagement

Correct Answer: B. Evidence adequate to support a claim before dissemination

Question 2

Why can a technically present disclaimer still be ineffective?

A. Disclaimers are never legally relevant

B. A disclaimer may be hidden, unclear or contradicted by the dominant message

C. Disclaimers are relevant only to political advertising

D. A disclaimer automatically makes every claim lawful

Correct Answer: B. A disclaimer may be hidden, unclear or contradicted by the dominant message

Question 3

Which practice is most clearly a dark pattern?

A. Showing a product’s total price before payment

B. Allowing users to withdraw consent through the same channel used to give it

C. Using a false countdown timer that resets for each visitor

D. Providing an accessible privacy notice

Correct Answer: C. Using a false countdown timer that resets for each visitor

Question 4

Which item is an example of a material connection requiring endorsement disclosure?

A. The influencer’s ordinary interest in the product category

B. Payment or free products provided by the advertiser

C. The audience’s demographic profile

D. The campaign’s colour palette

Correct Answer: B. Payment or free products provided by the advertiser

Question 5

What is the main purpose of data minimization?

A. To collect every potentially useful data point

B. To retain data indefinitely for future campaigns

C. To limit collection and use to what is necessary for the stated purpose

D. To replace all privacy notices with technical security

Correct Answer: C. To limit collection and use to what is necessary for the stated purpose

Question 6

Which statement about consent is most accurate?

A. Silence always constitutes valid consent

B. Consent eliminates all other privacy obligations

C. Consent should be informed, specific, voluntary and revocable where applicable

D. A preselected box is always the strongest form of consent

Correct Answer: C. Consent should be informed, specific, voluntary and revocable where applicable

Question 7

Which document most directly helps manage advertising asset rights?

A. A rights-clearance register recording licences, territories and terms

B. A media-rate card

C. A brand colour guide

D. A campaign mood board

Correct Answer: A. A rights-clearance register recording licences, territories and terms

Question 8

Why does political microtargeting create a democratic governance concern?

A. It prevents all forms of political communication

B. It can fragment public debate and use sensitive or opaque inferences

C. It makes every political claim automatically false

D. It removes the need for sponsor identification

Correct Answer: B. It can fragment public debate and use sensitive or opaque inferences

Question 9

Which is an example of privacy by design?

A. Adding a privacy notice only after a data breach

B. Collecting precise location by default for every campaign

C. Designing a campaign around contextual advertising to avoid unnecessary personal data

D. Keeping all customer data permanently

Correct Answer: C. Designing a campaign around contextual advertising to avoid unnecessary personal data

Question 10

What is the strongest reason for assigning named governance owners?

A. It ensures that responsibility is identifiable rather than diffusely assigned

B. It eliminates the need for monitoring

C. It transfers all legal responsibility to one employee

D. It makes evidence and documentation unnecessary

Correct Answer: A. It ensures that responsibility is identifiable rather than diffusely assigned