Question 240
The team at a conference venue has corrected this condition: A visitor application sends push offers without a documented user opt-in or data-use purpose. Which preventive practice BEST addresses the identified mechanism?
Explanation
Correct Answer
Audit opt-in and privacy requirements for each new location promotion. This repeatable safeguard addresses the mechanism—engagement signals may be technically available without creating lawful consent or notice—and reduces the chance that the specific fault recurs.
Incorrect Answers
Include mobile OS permissions in engagement acceptance testing. This protects against another issue—a lobby campaign is configured correctly but an old test mobile app receives no proximity notification because its notification permissions are disabled—but is not the most direct prevention for a visitor application sends push offers without a documented user opt-in or data-use purpose.
Document proximity accuracy limits in operational reports and policies. This protects against another issue—a site manager interprets two BLE tags detected by the same AP as proof that their wearers were within arm's reach for ten minutes—but is not the most direct prevention for a visitor application sends push offers without a documented user opt-in or data-use purpose.
Version and retest engagement floor plans after facility changes. This protects against another issue—a floor-plan remodel moves the approved customer display, but the old virtual beacon zone continues to trigger messages in an empty corridor—but is not the most direct prevention for a visitor application sends push offers without a documented user opt-in or data-use purpose.