CCB CCB Data Privacy & Information Security Compliance 2

Question 1

Under HIPAA's Security Rule, which type of safeguard includes workforce training and security policies?

Accepted Answer

Administrative safeguards

Answer

HIPAA's Administrative Safeguards include policies, procedures, workforce training, and security management processes designed to protect electronic protected health information (ePHI).

Question 2

What is the primary purpose of a Privacy Impact Assessment (PIA) in a compliance program?

Accepted Answer

To evaluate privacy risks of a new project or system before implementation

Answer

A Privacy Impact Assessment (PIA) systematically identifies and evaluates privacy risks associated with a new project, system, or process before it is deployed.

Question 3

Which term refers to the contractual obligation requiring a vendor who processes personal data on behalf of a company to follow the company's privacy requirements?

Accepted Answer

Data Processing Agreement (DPA)

Answer

A Data Processing Agreement (DPA) legally binds a third-party vendor (data processor) to handle personal data in accordance with the data controller's privacy obligations and applicable law.

Question 4

What is 'pseudonymization' as used in data privacy compliance?

Accepted Answer

Replacing identifying fields with artificial identifiers so data cannot be attributed to an individual without additional information

Answer

Pseudonymization replaces direct identifiers with artificial codes, reducing privacy risk while still allowing data to be re-linked if needed with separately held key information.

Question 5

A company experiences a ransomware attack that encrypts customer data. Under the FTC's data security expectations, which response is most appropriate first?

Accepted Answer

Activate the incident response plan and contain the breach

Answer

Best practice and regulatory expectation require activating the incident response plan to contain the breach, assess the impact, and follow proper notification protocols before other actions.

(CCB) Certified Compliance and Business Specialist Practice Test

(CCB) Certified Compliance and Business Specialist Practice Test

CCB CCB Data Privacy & Information Security Compliance 2