Certified Information Privacy Professional (CIPP) Practice Exam – Prep & Study Guide – All Questions

Browse all practice questions for the Certified Information Privacy Professional (CIPP) Practice Questions. Search by topic, open any question and review its full explanation, then test yourself in the practice quiz.

Start practice test Flash cards

Boost Your Privacy Training: The Importance of Tailored ContentWhich factor is essential for privacy training to be effective?Deciphering CALEA: What You Need to Know About Law Enforcement RequirementsWhich of the following is NOT a requirement under CALEA?Decoding Consent Decrees: The Key to Settling FTC NegotiationsWhat type of document is likely signed when a firm negotiates a settlement with the FTC without going to litigation?Discover How CalECPA Enhances Privacy in Online CommunicationsCalECPA offers additional privacy protections for which area?Dodd-Frank Act: A Shield Against Abusive Financial PracticesWhat kind of practices does the Dodd-Frank Act aim to regulate?Explore the Fundamentals of Privacy Best PracticesWhich one of the following statements is not correct about privacy best practices?Facebook's Record Fine: A Lesson in Privacy AccountabilityWhich company faced the largest privacy-related fine in FTC history?How Edward Snowden Changed Privacy Laws ForeverWhat event triggered legislative action to limit government surveillance under the USA Freedom Act?Mastering CALEA: Navigating Telecommunications RegulationWhich agency is responsible for overseeing the application of CALEA?Mastering Fair Hiring: Essential Insights for HR ProfessionalsWhich interview practices may HR recommend to reduce the risk of discrimination in hiring?Mastering Incident Response: Prioritizing What Matters MostWhat should be prioritized in the incident response plan for an organization?Mastering Metadata Collection: Understanding FBI MethodsWhat method would an FBI agent most likely use to collect metadata on phone calls to and from a corporation?Mastering Personal Jurisdiction in Legal ContractsIn a contract where parties agree to settle disputes in New York courts, what type of jurisdiction is established?Mastering Privacy by Design for Information Privacy ProfessionalsUnder the Privacy by Design philosophy, which statement is correct?Mastering the CIA Triad: The Core of Cybersecurity ProgramsWhat is the main goal of a cybersecurity program that encompasses confidentiality, integrity, and availability?Mastering the Essentials: Understanding Categories of Identifiable InformationWhich category would include any information that uniquely identifies an individual person?Mastering the Preparation Phase of Incident ResponseDuring which phase of the incident response process are policies and procedures created?Navigating Breach Notification Requirements: A CIPP PerspectiveWhat are Sandy's notification requirements after a breach affecting 800 individuals?Navigating COPPA: Parental Consent and Children's Online PrivacyUnder COPPA, what requirement must online services fulfill when collecting personal information from children?Navigating COPPA: What Online Services Must Do for Children's PrivacyWhat must online services do when targeting children under COPPA?Navigating Cross-Border Data Transfers: What Nacy Needs to KnowWhat can Nacy do to facilitate legal data transfers between the U.S., Japan, and Singapore?Navigating Customer Notification Exceptions Under RFPAUnder the RFPA, which circumstance is an exception to customer notification requirements?Navigating Data Transfer from the EU to the US: A Clear PathWhat route is recommended for facilitating data transfer from EU companies to a U.S.-based startup?Navigating Employment and Disabilities: What You Need to KnowUnder which conditions are employers prohibited from denying employment based on disability?Navigating International Data Transfers for Multinational CorporationsWhat approach should a U.S.-based multinational corporation take to facilitate international data transfers?Navigating Jurisdiction: Understanding Minimum ContactsUnder what standard might a company in one state become subject to the jurisdiction of the courts of another state?Navigating Multinational Compliance Challenges in eDiscoveryWhat situation does Said's company face when complying with an eDiscovery request for personal data?Navigating NYDFS: Understanding the NIST Framework for Financial OrganizationsNYDFS requires financial organizations to implement a program of data security controls aligned with which of the following?Navigating State Data Security Requirements—What You Need to KnowWhich of the following is NOT a common feature of state data security requirements?Navigating the Code of Federal Regulations in Administrative LawWhat source contains much of the administrative law created by the U.S. government?Protecting Sensitive Information: What Your Privacy Program Should CoverWhich of the following types of information should be protected by a privacy program?Tennessee's SB 2005: What Every CIPP Student Should KnowTennessee's SB 2005 changed the state's breach notification laws in which respect?The Backbone of Privacy Rights: Understanding the Fourth AmendmentThe foundation of individual privacy rights in the United States is established by which Amendment?The Enforcement Actions of the FTC: What You Need to KnowWhat summarizes the enforcement actions of the FTC?The Essential Focus of State Privacy RegulationsWhat is the primary focus of privacy regulations enacted by states?The Essential Role of U.S. District Courts in Federal LawWhich one of the following courts is the trial court for most matters arising under federal law?The Essentials of Legal Contracts You Should KnowWhich of the following elements is not always required for the creation of a legal contract?The Essentials of the Bank Secrecy Act in Fighting Money LaunderingWhich law was primarily intended to help combat money laundering?The Impact of Credit Reports on Employment Decisions: A Deep DiveWhy have many states restricted the use of credit reports in employment decisions?The Impact of Security Cameras on Employee RightsWhy might the installation of a security camera in the cafeteria be problematic for employees advocating for collective bargaining?The Impact of VPPA Regulations on Streaming MediaWhat is the most significant current impact of VPAA regulations?The Importance of Compliance in Employee Background ScreeningWhat is the main reason federal regulations monitor employee background screening?The Importance of Gap Analysis in Privacy Control DesignWhen designing privacy controls, an organization should be informed by the results of which type of analysis?The Importance of Written Policies in Misconduct InvestigationsWhat is one of the main goals of having a written policy for handling misconduct investigations?The Intricacies of U.S. Privacy Law in Comparison to the GDPRWhich U.S. federal law is most comparable to the EU's GDPR?The Roots of Common Law: Understanding Its Global InfluenceWhat nation was the original source of the common law used in many parts of the world?The Value of an Independent Third Party in Cybersecurity Lessons LearnedWho is most effective in leading a lessons learned session after a cybersecurity incident?TrustE’s FTC Charge: A Cautionary Tale for Privacy ComplianceWhat privacy certification firm was charged by the FTC for not conducting required annual recertifications?Understand the RFPA: Customer Records Disclosure RequirementsWhat is required before a financial institution can disclose customer records under the RFPA?Understand Which Agency Enforces Consumer Protection for Financial ProductsWhich agency is responsible for enforcing consumer protection related to financial products and services?Understanding "Piercing the Corporate Veil" in Business LawIn a corporate context, what does "piercing the corporate veil" refer to?Understanding Adequacy Decisions Under GDPR for International Data TransfersIn terms of international data transfer, what are 'adequacy decisions' under the GDPR?Understanding Advanced Persistent Threats in CybersecurityWhich type of cybersecurity threat is likely to have the most sophisticated attack tools?Understanding Adverse Reports: The Right Steps for EmployersWhat action is required if an employer receives an adverse report about a job applicant?Understanding Advertising Regulation for ChildrenWhich industry group governs organizations that advertise specifically to children?Understanding Aggregation: Protecting Privacy While Sharing InsightsWhat technique involves disclosing only a table of summary statistics about overall performance, while avoiding personal identifiers?Understanding Alabama's Comprehensive Breach Notification LawWhat was the 50th state to enact a comprehensive breach notification law?Understanding AML: The Key to Financial Crime PreventionWhat acronym describes the program designed to monitor accounts for signs of financial crimes?Understanding Appropriation in Privacy LawWhat type of claim was brought against Gary's firm for using an athlete's picture in marketing materials without permission?Understanding Breach Notification Laws: What Organizations Must DoState breach notification laws may require organizations to notify which of the following parties?Understanding Breach Notification Requirements in CIPP StudiesWhich of the following is not likely to appear as a state breach notification requirement?Understanding Breach Notification Requirements: What Matters Most?What must an organization consider when determining breach notification requirements in a state?Understanding Breach Notification Timelines: A State-by-State LookWhich state does NOT have a specific timeline requirement for breach notifications to consumers?Understanding CCPA Enforcement: What You Need to KnowThe CCPA may be enforced by which of the following?Understanding CFIPA's Notice and Choice Rules: What You Need to KnowWhich of the following best describes the notice and choice rules implemented by CFIPA?Understanding Civil Actions in Data Breach CasesWhat does the term "civil actions" refer to in the context of data breaches?Understanding Consent Decrees in Business ComplianceWhat term describes a voluntary agreement between a firm and the federal government regarding business practices?Understanding Consequences of Data Breaches: What Companies Need to KnowAfter experiencing a data breach, which is NOT a potential consequence for AllData, Inc. under state laws?Understanding Consequences of Non-Compliance with Breach Notification LawsWhat is a consequence of failing to comply with state breach notification laws?Understanding Consumer Classification Under GLBAAccording to GLBA, how is someone who has conducted a one-time transaction with a bank classified?Understanding Consumer Reports: Key Elements You Should KnowWhich types of information would most likely classify Mary's background information collection as a consumer report?Understanding COPPA: Protecting Children's Online PrivacyWhich law grants the FTC authority to regulate websites specifically targeting children?Understanding COPPA: Protecting Children's Privacy OnlineWhich law focuses on protecting the personal information of children online?Understanding Criminal Liability: A Key Concept for CIPP AspirantsWhat kind of liability may only be asserted in court by governmental authorities and not by a private citizen?Understanding Cybersecurity Attackers: Who’s Who in the Digital Threat LandscapeWhat type of cybersecurity attacker is least likely to have access to advanced tools?Understanding Cybersecurity Incidents: When Malware AttacksWhat term best describes an incident where malware stole an employee's password?Understanding Cybersecurity Program ObjectivesWhich one of the following would not be a typical objective of a cybersecurity program?Understanding Data Handling Roles Under GDPR: A Closer LookIn the context of GDPR, what role does Grafton Street Coffee Co. play in partnership with AdCorp in data handling?Understanding Data Minimization in CybersecurityIn the context of cybersecurity, what does data minimization refer to?Understanding Data Retention in PCI DSS StandardsWhat is one of the main focuses of the PCI DSS standards?Understanding Deceptive Practices: Key Elements You Should KnowWhich of the following is NOT an element of the definition of deceptive practices?Understanding Discrimination Claims and Political ViewsWhich of the following does NOT serve as a basis for discrimination claims?Understanding Do-Not-Call Regulations and the FCC's RoleWhich agency is likely to investigate a financial institution violating the Do-Not-Call rules?Understanding ECPA Exceptions for Workplace Video MonitoringWhich exceptions to the ECPA allow employers to conduct video monitoring in the workplace?Understanding eDiscovery: A Key Concept in Records ManagementWhat does the term "eDiscovery" refer to in the context of records management?Understanding Employee Misconduct Investigations in CIPP ContextWhich of the following statements is NOT true about employee misconduct investigations?Understanding Employee Misconduct Investigations: Your Essential GuideWhen hiring an outside investigator for employee misconduct, which requirement applies?Understanding Employee Rights in Unionization EffortsWhich of the following statements is true regarding employee rights in unionization efforts?Understanding Employer Monitoring: What's Legit and What's NotWhich of the following is NOT a common reason for employers to implement monitoring programs?Understanding FACTA: The Key to Protecting Sensitive Personal InformationWhat federal privacy law contains specific requirements for how organizations must dispose of sensitive personal information?Understanding FACTA: Your Essential Guide to Consumer Data DisposalWhich law imposes specific requirements on the disposal of consumer report information?Understanding FACTA: Your Right to Annual Credit ReportsWhat law allows consumers to access their credit reports annually?Understanding False Light in Privacy LawsuitsIn a recent invasion of privacy lawsuit, the plaintiff claimed the respondent caused them to be falsely perceived by others. What tort is involved?Understanding FERPA Exceptions for Sharing Student InformationWhich of the following is an exception under FERPA for sharing student information?Understanding FERPA: The Guardian of Student PrivacyWhich regulation requires educational institutions to protect the privacy of student records?Understanding FERPA: The Key to Student Privacy in EducationWhich federal law primarily governs the protection of students’ personal information in educational settings?Understanding FERPA: Who Can Access Your Educational Records?Under FERPA, which party may Planeville College legally release Bella's transcripts to without her consent?Understanding FTC Actions Against Companies: The Case of Acme WidgetsWhy was Acme Widgets the subject of an FTC enforcement action?Understanding FTC Complaints and Administrative Law JudgesWho oversees the first trial if a company contests a complaint filed by the FTC?Understanding FTC Consent Decrees in Privacy ComplianceIf a company enters into an agreement to comply with privacy standards after an investigation, what is this action called?Understanding GDPR Compliance for U.S. CompaniesDo U.S.-based companies need to comply with GDPR requests for data subject rights if they do not operate in the EU?Understanding GDPR Derogations for International Data TransfersWhich of the following is NOT a derogation that allows international data transfers under GDPR?Understanding GDPR Penalties: What Digital Empire Could FaceWhat is the largest penalty Digital Empire might face for violating GDPR provisions?Understanding GDPR: Standard Contractual Clauses for International Data TransfersWhen transferring data internationally, what documentation may be required under GDPR?Understanding GDPR: Who Does It Really Protect?GDPR provides privacy protection primarily for which population?Understanding GDPR: Who It Applies To and Why It MattersTo whom does the GDPR apply, regardless of business establishment?Understanding GDPR's Data Breach Notification RequirementsWhich one of the following laws includes a data breach notification requirement that applies to many different categories of personal information?Understanding Genetic Information Legislation for EmployersWhich legislation regulates the collection of genetic information by employers?Understanding Genetic Information: Key Insights for CIPP Exam PreparationWhich of the following does NOT meet the definition of genetic information employees are prohibited from collecting?Understanding GINA: Protecting Your Genetic Privacy in the WorkplaceUnder which act are employers prohibited from collecting most genetic information?Understanding GPEN's Mission: What You Need to KnowWhich of the following is NOT part of GPEN's mission?Understanding HHS Guidelines for De-Identification: Why Population Size MattersWhat is the smallest population size for which ZIP codes can be retained according to HHS guidelines for de-identifying records?Understanding HIPAA Classifications: The Case of MediRecs Co.How is MediRecs Co. classified under HIPAA?Understanding HIPAA: Ethical Sharing of PHIUnder HIPAA, which of the following is NOT an acceptable reason to share PHI without patient consent?Understanding HIPAA: When Can Patient Information Be Shared?Under HIPAA, when can patient information freely be shared?Understanding International Data Transfer Mechanisms in the EUWhat is the international data transfer mechanism when the EU permits transfers to another country?Understanding Invasion of Solitude: A Key Privacy TorteWhat tort is involved in a case where a plaintiff alleges that the respondent accessed their email without permission?Understanding ISO 27701: The Key to Effective Privacy ControlsWhich ISO standard is best suited for designing an organization's privacy controls?Understanding Jurisdiction in Legal ContextsWhat does the term "jurisdiction" refer to in legal contexts?Understanding Leadership in eDiscovery: Who's at the Helm?Who typically leads an eDiscovery process within a company?Understanding Legislative Law: The Role of the U.S. CodeWhich of the following documents primarily contains legislative law?Understanding Material Misrepresentation in Deceptive Trade PracticesWhat type of violations must be proven to demonstrate a deceptive trade practice?Understanding MSA: The Key to Long-Term Consulting AgreementsWhat type of agreement is most appropriate for a long-term contract with consulting services that includes general terms?Understanding National Security Letters: What They Are and How They WorkWhat are National Security Letters best described as?Understanding New Jersey's Personal Information and Privacy Protection ActThe New Jersey Personal Information and Privacy Protection Act relates to privacy concerning which of the following?Understanding Nomi's Controversy: A Lesson in Consumer PrivacyWhich firm was charged with an unfair trade practice for collecting information from mobile devices without consent?Understanding OSHA's Role in Workplace PrivacyHow does OSHA's oversight impact workplace privacy?Understanding Paper Record Disposal: What You Need to KnowWhich one of the following is not an acceptable method for disposing of paper records containing personal information?Understanding PCI DSS: A Collective Responsibility for Payment SecurityWhich organization created the PCI DSS standards for credit card processing?Understanding Polygraph Tests in Preemployment ScreeningIt is probably permissible to use a polygraph test in preemployment screening for all of the following jobs, except:Understanding Privacy Certifications: Lessons from TRUSTe's FTC SanctionWhich of the following firms was sanctioned by the FTC after an investigation showed they were not diligent in carrying out privacy program recertifications?Understanding Privacy Notices: What You Should KnowWhat is unlikely to appear in an organization's privacy notice?Understanding Privacy Protections for JournalistsWhich of the following provides special privacy protections for journalists?Understanding Privacy Training: Not One-Size-Fits-AllWhich statement about privacy training is incorrect?Understanding Protected Classes in Federal Antidiscrimination LegislationWhich of the following does NOT constitute a protected class in federal antidiscrimination legislation?Understanding Purpose Limitation in Patient Data UsageWhich principle should a privacy officer be concerned about if patient records are used for marketing purposes?Understanding Records Retention Policies in the WorkplaceWhich statement about records retention of personnel files is incorrect?Understanding Security Alerts: Key Systems That Keep You SafeWhich systems are common sources for security alerts?Understanding Speech Categories of Personal Data under GDPRWhich field fits into the "speech categories of personal data" under GDPR?Understanding State Privacy Regulations in the Absence of Federal StandardsWhat is the primary reason that states are able to pass sweeping privacy regulations?Understanding State Privacy Regulations: A Guide for the CIPP ExamWhich reason is NOT valid for states enacting privacy regulations?Understanding State-Specific Breach Notification Laws in the U.S.What is the main reason why each of the 50 states have their own breach notification laws?Understanding Telemarketing Laws: Dana's DilemmaIs Dana's ISP breaking the law if she continues to receive telemarketing calls after adding her number to the national do-not-call list?Understanding the 4th Amendment: Your Shield Against InvasionWhat is the main focus of the 4th Amendment?Understanding the 21st Century Cures Act and Its Role in Clinical Trial TransparencyWhich legislation allows CureSearch to access study results from medical trials readily?Understanding the Age Discrimination in Employment Act and Its ImplicationsAge discrimination is prohibited by which of the following?Understanding the APEC Privacy Framework: Key Principles and BeyondWhich of the following is NOT one of the principles of the APEC privacy framework?Understanding the CAN-SPAM Act and State PrivilegesWhich privilege does the CAN-SPAM Act grant to states?Understanding the CAN-SPAM Act: Mark's Restaurant MessageShould Mark's message about his new restaurant be regulated under the CAN-SPAM Act?Understanding the CBPR System and Its Role in International Data TransferWhat is the CBPR system designed for?Understanding the CCPA: A Key to Consumer Privacy RightsWhich law contains a private right of action?Understanding the Commerce Clause and Its Impact on Federal PowerWhich constitutional clause gives Congress the power to regulate interstate commerce?Understanding the Composition of the U.S. SenateHow many voting members comprise the U.S. Senate?Understanding the Consequences of Data Breaches for OrganizationsWhich of the following is NOT a common consequence an organization faces after a data breach?Understanding the Constitutional Right to PrivacyWhich amendment to the U.S. Constitution explicitly grants individuals the right to privacy?Understanding the Consumer Financial Protection Bureau and Its Role in Financial PrivacyWhat federal agency was created by the Dodd-Frank Act with enforcement authority for financial privacy regulations?Understanding the Consumer's Perspective on Deceptive PracticesIn relation to deceptive practices, which perspective is crucial for examination?Understanding the Controversial Provisions of the Patriot ActWhich provisions of the Patriot Act were controversial and set to expire unless reauthorized?Understanding the Core Mission of GPEN in Privacy EnforcementWhat does GPEN's mission seek to enhance among its member nations?Understanding the Core of Data Privacy AuditsWhat would be the primary focus of a data privacy audit?Understanding the Core of Privacy Programs: The Unchanging MissionWhich element of a privacy program is likely to remain unchanged for long periods of time?Understanding the Core Purpose of the U.S. ConstitutionWhat is the primary purpose of the U.S. Constitution?Understanding the Critical Role of Preservation in eDiscoveryWhat step of the eDiscovery process involves placing legal holds on records?Understanding the Cybersecurity Goals: A Deep Dive into AvailabilityIn a scenario where important medical records were deleted without backups, which cybersecurity goal was most affected?Understanding the Cybersecurity Information Sharing Act (CISA)Which act facilitates sharing cyber-threat intelligence with the government?Understanding the Definition of "Person" Under U.S. LawWhich entity is not normally considered a person under U.S. laws?Understanding the Digital Online Consumer Protection Act (DOPPA) and Your Reading HabitsWhich law governs the privacy of consumer reading habits?Understanding the Do-Not-Call Registry: When Can You Call?Under which scenario can a business legally call consumers on the Do-Not-Call registry?Understanding the Dodd-Frank Act: What Financial Institutions Must AvoidThe Dodd-Frank Act prohibits financial institutions from engaging in which type of business practices?Understanding the Duty of Care in Tort Law: Key Concepts for CIPP StudentsWhich of the following is a requirement for a tort of negligence?Understanding the Employee Polygraph Protection Act: Key ExceptionsWhich of the following is NOT an exception under the Employee Polygraph Protection Act (EPPA)?Understanding the Employee Polygraph Protection Act: Safeguarding Your RightsWhich act prohibits the use of polygraph tests for most employment purposes?Understanding the Enforcement of the Privacy Protection ActWhich entity enforces the Privacy Protection Act (PPA)?Understanding the Essential Elements of Information Security SafeguardsWhich of the following is NOT a common feature of information security safeguards required by private sector regulations?Understanding the Essentials of Workforce Privacy TrainingWhich statement about workforce privacy training is incorrect?Understanding the Exclusions in Washington's Biometric Privacy LawThe Washington State Biometric Privacy Law protects all forms of biometric data except:Understanding the Fair Credit Reporting Act: Your Guide to Credit Reporting AgenciesWhich federal law governs the regulation of credit reporting agencies?Understanding the FTC Appeals Process: Who Reviews Administrative Law Judge Decisions?Which body appeals decisions made by administrative law judges regarding FTC complaints?Understanding the Global Privacy Enforcement Network's Role in Cross-Border PrivacyWhich organization is focused on cross-border privacy enforcement cooperation?Understanding the Heart of FACTA: Protecting Against Identity TheftWhat is the primary purpose of FACTA?Understanding the HIPAA Privacy Rule: A Dive into Administrative LawWhat category of law best describes the HIPAA Privacy Rule?Understanding the HITECH Act and PHI Breach NotificationsWhat is a requirement of the HITECH Act regarding PHI breaches affecting over 500 individuals?Understanding the Impact of FERPA on EducationWhich industry is governed by the Family Educational Rights and Privacy Act (FERPA)?Understanding the Impact of the Red Flags Rule on Consumer Identity TheftWhich problem was primarily targeted by the Red Flags Rule?Understanding the Implications of Fair Labor Standards Act ViolationsWhat is a consequence of being found in violation of the Fair Labor Standards Act (FLSA)?Understanding the Importance of a Master Service Agreement (MSA)What is the primary purpose of a Master Service Agreement (MSA)?Understanding the Importance of Annual Privacy Risk AssessmentsHow often does industry best practice recommend conducting privacy risk assessments?Understanding the Importance of Data Classification in CybersecurityWhich practice best addresses the need for appropriate cybersecurity controls for different types of information?Understanding the Importance of Data Flow Diagrams in Privacy ManagementWhat is the primary purpose of data flow diagrams in privacy management?Understanding the Importance of Preservation in eDiscoveryWhat action typically follows the identification of relevant records in the eDiscovery process?Understanding the Importance of Protected Health Information (PHI)Which category is the most applicable to a patient's medical record?Understanding the Importance of the Notice Principle in Data PrivacyWhat privacy principle is likely being violated if an organization uses previously collected customer addresses for a new purpose without disclosure?Understanding the Importance of the Quality Principle in PrivacyWhich privacy principle emphasizes the importance of maintaining accurate and relevant information about individuals?Understanding the Importance of Transparency in Data CollectionWhich principle ensures that subjects are informed about data collection and use?Understanding the Judicial Branch: A Dive into Article IIIWhat article in the U.S. Constitution defines the powers of the judicial branch?Understanding the Key Element of Damages in Negligence LawsuitsIn a negligence lawsuit, what element was missing if the court found the respondent was not at fault due to lack of evidence of harm?Understanding the Key Requirement for Enforceable ContractsWhat is required for a contract to be enforceable?Understanding the Layered Privacy Policy: Your Key to Informed ChoicesWhat term describes a privacy policy that features a simplified summary at the top followed by legal details?Understanding the Legacy of FISA: Lessons in Privacy and SurveillanceWhich legislative act was established to regulate government surveillance powers after the Watergate scandal?Understanding the Legal Guidelines for Customer Information DestructionWhich federal law provides guidelines for the destruction of customer information?Understanding the Legislative Branch: Article I of the U.S. ConstitutionWhich portion of the US Constitution defines the powers of the legislative branch of government?Understanding the Legislative Branch's Check on the ExecutiveWhat check-and-balance does the legislative branch hold over the executive branch?Understanding the Minimization Principle and Its Importance in Data PrivacyWhat is an example of a situation where the minimization principle would be applied?Understanding the Minimization Principle in Government SurveillanceWhich principle ensures that government surveillance minimizes unnecessary privacy violations?Understanding the Notice Principle in Privacy PracticesWhat is one provision of the notice principle in privacy practices?Understanding the Nuances of Workplace Drug and Alcohol TestingWhich statement is NOT accurate regarding workplace drug and alcohol testing?Understanding the Phase of Incident Response: Limit Damage, Identify Attackers, and RecoveryWhich is NOT an objective of the containment, eradication, and recovery phase of incident response?Understanding the Principle of Least Privilege in Data SecurityWhich of the following best defines the principle of 'least privilege' in data security?Understanding the Principle of Stare Decisis in LawWhich of the following best describes the legal principle of stare decisis?Understanding the Privacy Laws Related to Education RecordsWhich privacy law is associated with educational records?Understanding the Privacy Protection Act: Safeguarding Journalistic FreedomWhat is the primary purpose of the Privacy Protection Act (PPA)?Understanding the Ratification Process of the U.S. ConstitutionWhat proportion of the states must ratify an amendment before it is added to the U.S. Constitution?Understanding the RFPA and Federal Agencies’ Requests for Financial RecordsIn order for a federal agency to issue a formal request for financial records under the RFPA, which condition is not required?Understanding the Right to Financial Privacy Act (RFPA) and Your RightsWhat type of records does the Right to Financial Privacy Act (RFPA) provide privacy protections for?Understanding the Right to Financial Privacy Act and Your RightsWhich federal regulation allows individuals to challenge the release of their financial records?Understanding the Right to Financial Privacy Act's Impact on Consumer RightsWhat is the primary legislative purpose of the Right to Financial Privacy Act (RFPA)?Understanding the Right to Privacy: Lessons from Olmstead v. United StatesWhich Supreme Court case first introduced the term "right to be let alone"?Understanding the Right to Rectification in GDPRWhich of the following rights allows individuals to request corrections to their data under GDPR?Understanding the Role of a Chief Privacy OfficerWhat is not a common responsibility of an organization's chief privacy officer?Understanding the Role of a Chief Privacy OfficerWhat is the primary role of a Chief Privacy Officer (CPO)?Understanding the Role of a Data Controller in Information PrivacyWhat term best describes an organization that maintains a database of customer information for its own marketing purposes?Understanding the Role of a Data Controller: Key InsightsWhich of the following describes the role of a data controller?Understanding the Role of a Data Custodian in Data PrivacyWhich of the following roles involves functioning as a steward to protect data in the organization?Understanding the Role of a Data Exporter in International Data TransfersWhat role does Marco's company play in managing international data transfers?Understanding the Role of CFPB in Financial AdvertisingWhat federal agency would handle deceptive practices in financial advertising by Anytown Savings Bank?Understanding the Role of Data Controllers Under GDPRWhat is one key characteristic of data controllers under GDPR?Understanding the Role of Labor Relations Boards in Unionization EffortsWhich agency would most likely initiate an investigation into a company's interference with employee unionization efforts?Understanding the Role of NCUA in Credit Union SupervisionWhich federal agency supervises federally chartered credit unions?Understanding the Role of Statement of Work in Project ManagementAfter signing an overarching agreement, what document should be used to document the requirements of a specific project engagement?Understanding the Role of the Attorney General in State Law EnforcementWho is responsible for bringing enforcement actions against firms under state laws?Understanding the Role of the Chief Privacy OfficerWhat individual within an organization is likely to bear overall responsibility for a privacy program?Understanding the Role of the Federal Trade Commission in Consumer ProtectionWhat federal agency has primary authority to enforce against unfair and deceptive practices?Understanding the Role of the Foreign Intelligence Surveillance CourtWhat court has subject matter jurisdiction specifically tailored to matters of national security?Understanding the Role of the FTC in Privacy ProtectionWhich organization is primarily responsible for investigating unfair or deceptive acts in privacy protection?Understanding the Safe Harbor Program in Data TransfersWhat term describes a common regulatory framework that allows international data transfers?Understanding the Schrems II Impact on Data PrivacyWhich decision by the EU Court of Justice declared the EU / US Privacy Shield invalid?Understanding the Shift from Consumer Reports to Investigative ReportsWhich of the following preemployment screening activities would turn a regular consumer report into an investigative report?Understanding the Sources of Workplace Privacy RegulationsWhich of the following best describes the primary source of workplace privacy regulations in the United States?Understanding the Supremacy Clause: The Cornerstone of PreemptionWhat clause of the U.S. Constitution establishes the concept of preemption?Understanding the Telecommunications Act: A Deep Dive into Verizon's Privacy ViolationWhat law did the FCC accuse Verizon of violating regarding the use of customer information for marketing purposes?Understanding the Third-Party Doctrine and Your Privacy RightsWhat type of information does the Supreme Court consider not protected under the 4th Amendment as per the third-party doctrine?Understanding the Third-Party Doctrine in Privacy LawWhat does the third-party doctrine imply regarding information transferred to third parties?Understanding the Transition Management Phase in Employment TerminationWhat takes place during the transition management phase of ending an employment relationship?Understanding the Transparency Principle of GDPRWhich GDPR regulation principle requires that data processing is conducted transparently?Understanding the USA Freedom Act and Its Role in Privacy LawWhich of the following laws was not amended by the Patriot Act?Understanding the USA Freedom Act: Key Reforms in SurveillanceWhich reform regarding surveillance did the USA Freedom Act implement?Understanding the USA Patriot Act's Impact on Intelligence GatheringWhich provision of the USA Patriot Act increased government intelligence gathering capabilities?Understanding the Veto: A Crucial Check-and-Balance in GovernmentWhich one of the following is an example of a check-and-balance held by the executive branch of government?Understanding Unfair Practices According to the FTCWhich of the following is considered an unfair practice by the FTC?Understanding Unfair Trade Practices and Consumer InjuryWhich one of the following is not part of the criteria for determining if a trade practice unfairly injures consumers?Understanding Washington State Privacy Laws for App DevelopersWhat must Jorge do to comply with Washington State law regarding his smartphone app?Understanding Washington's Exclusion on Biometric DataWhich type of biometric data is specifically excluded from Washington's definition of protected biometric data?Understanding What Doesn’t Belong in a Privacy Program InventoryWhat type of information would not normally be included in Carla's privacy program inventory?Understanding What GDPR Stands For and Its Impact on Data PrivacyWhat does GDPR stand for?Understanding Workplace Privacy: The Role of Federal AgenciesWhich federal agency has primary responsibility for enforcing workplace privacy legislation?Understanding Your Rights Under GDPR: A Deep DiveWhich of the following is NOT a data subject right conferred by the GDPR?Understanding Your Rights Under the Fair Credit Reporting ActWhat is a key requirement under the Fair Credit Reporting Act (FCRA) concerning consumer reports?Understanding Your Rights: Stopping Targeted AdsOn what provision is Pierre's demand to stop targeted ads most likely based?Understanding Your Role in Personal Data: What It Means to be a Data SubjectTom recently filled out a survey about his political and religious views. What term best describes Tom's role with respect to this data?Understanding Zero-Day Vulnerabilities: The Cybersecurity Threat You Need to KnowWhich term describes cybersecurity exploits for which there is not yet an effective corrective measure?What Happens When Companies Ignore Privacy Rules?What action is taken when a company fails to properly monitor its privacy policies?What You Need to Know About HIPAA and Patient Access to Medical RecordsUnder HIPAA, which information are patients not allowed to view in their medical files?What You Need to Know About the FTC's Role in Privacy ProtectionWhich of the following is not usually a role of the FTC in privacy protection?What's the Scoop on GLBA Definitions for Financial Institutions?What should a financial institution consider a recent non-customer under GLBA?Who Enforces HIPAA? Get the Facts You Need!Which federal agency is primarily responsible for enforcing HIPAA privacy and security obligations?Who’s Responsible for Workplace Privacy Policies?Which department in a business is MOST likely to be responsible for implementing workplace privacy policies?Why a Documented Information Security Program is Your Best DefenseWhat document must be included in the information security program according to private sector regulations?Why Antidiscrimination Laws Matter for Workplace PrivacyWhy are antidiscrimination laws relevant to workplace privacy?Why Auditing Privacy Programs Matters for ComplianceWhat is a common reason for conducting audits of privacy programs?Why Corporations Fear Sharing Cyber-Threat InformationWhat is one reason corporations may have hesitated to share cyber-threat information?Why Data Flow Diagrams Matter for Security IncidentsWhat is a potential consequence if an organization's data flow diagrams do not effectively map information sharing?Why Employers Must Tread Lightly When Monitoring Employee Social MediaWhat reason might lead an employer to exercise caution in monitoring employee social media activity?Why Incident Response Plans are Vital for Data SecurityWhat is one of the key goals of an incident response plan?Why It's Crucial for Organizations to Audit Their Privacy ProgramsWhat type of organization commonly requests a formal audit of a privacy program?Why Periodic Refresher Training is Essential for a Privacy-Aware WorkforceWhich type of training is an important aspect of developing a privacy-aware workforce?Why the EU's Court of Justice Struck Down the U.S.-EU Privacy ShieldWhat was the main reason for the EU's Court of Justice striking down the U.S.-EU Privacy Shield?Why Understanding PCI DSS is Essential for Protecting Credit Card InformationWhat self-regulatory scheme is designed to protect credit card information?Your Guide to Understanding Trust Marks in Privacy ComplianceWhat term describes a graphic that indicates a website meets certain privacy criteria?

More practice questions

These questions are part of the practice quiz. Start practicing

What term best describes a document detailing the process to follow during a ransomware attack?
What type of malicious software encrypts data to render it inaccessible?
Which of the following is an example of active online data collection?

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy