あらかじめ明示的に同意を得た相手だけに, 広告宣伝メールの送付や個人情報の取得を行う, コンプライアンスにのっとった手法を表すものはどれか。
平成28年度 秋期 ITパスポート試験 問3
This question's explanation and your answers so far.
問 3
Incorrectア
Activation is a term referring to the procedure of enabling and starting the use of purchased software or a service (such as license authentication or account activation), and is unrelated to a consent method for sending e-mail or collecting personal information.
Incorrectイ
Opt-out is a method in which sending or collecting is carried out first, and it stops only when the recipient expresses an intention to “refuse (stop delivery).” Because it is not premised on prior consent, it is the opposite of the question’s condition of “only to parties whose explicit consent has been obtained in advance,” so it is incorrect.
- ウ
正解 The correct answer is “ウ Opt-in.” Opt-in is a method in which advertising/promotional e-mails are sent, or personal information is collected, only to parties who have first, as recipients, given their explicit consent (permission). The condition in the question, “only to parties whose explicit consent has been obtained in advance,” is exactly the definition of opt-in itself; the Act on Regulation of Specified Electronic Mail also requires opt-in (prior consent) as a rule for sending advertising/promotional e-mails. Because it starts from obtaining consent, it can be said to be a compliance-based approach (compliance with laws and regulations).
Incorrectエ
A whitelist is a control method in which the targets permitted to communicate or execute are enumerated in advance; it is a mechanism used for anti-spam measures and access control. It is not a term that describes the method of obtaining explicit consent from the individual, so it is incorrect.
- Grasp the paired distinction: opt-in = a method that sends or collects only to parties whose explicit prior consent has been obtained; opt-out = a method that keeps sending or collecting until the party expresses refusal.
- Under the Act on Regulation of Specified Electronic Mail, advertising/promotional e-mails require opt-in (prior consent) as a rule, and this is precisely a compliance-based approach.