CCB CCB Data Privacy & Information Security Compliance

Question 1

Under the California Consumer Privacy Act (CCPA), what right allows consumers to request deletion of their personal information?

Accepted Answer

Right to erasure

Answer

Right to opt-out

Answer

Right to portability

Answer

Right to access

Question 2

Which U.S. federal law establishes minimum data security standards for financial institutions, including safeguard rules for customer information?

Accepted Answer

Gramm-Leach-Bliley Act (GLBA)

Answer

HIPAA

Answer

Sarbanes-Oxley Act

Answer

FISMA

Question 3

A data breach notification requirement typically mandates reporting within how many hours under U.S. federal banking regulations?

Accepted Answer

36 hours

Answer

24 hours

Answer

72 hours

Answer

96 hours

Question 4

Which of the following best describes 'data minimization' as a privacy compliance principle?

Accepted Answer

Collecting only data necessary for a specific purpose

Answer

Encrypting all collected data

Answer

Storing data in the smallest possible file format

Answer

Limiting data access to senior management only

Question 5

In the context of information security compliance, what does a 'data inventory' primarily help an organization accomplish?

Accepted Answer

Map where personal data is collected, stored, and shared

Answer

Track employee productivity

Answer

Calculate the monetary value of company data

Answer

Automate data deletion schedules

Question 6

Which framework is most commonly used by U.S. organizations to assess and improve cybersecurity risk management practices?

Accepted Answer

NIST Cybersecurity Framework (CSF)

Answer

ISO 27001

Answer

SOC 2 Type II

Answer

PCI DSS