CCCP Technology & Data Compliance 2

Question 1

Under the California Consumer Privacy Act (CCPA), what right allows consumers to direct businesses to stop selling their personal information?

Accepted Answer

Right to opt-out

Answer

The CCPA's right to opt-out allows California consumers to direct businesses not to sell their personal information to third parties.

Question 2

A company experiences a ransomware attack that encrypts employee PII. Under HIPAA, when must breach notification to HHS be submitted if fewer than 500 individuals are affected?

Accepted Answer

Within 60 days after the end of the calendar year

Answer

HIPAA requires covered entities to notify HHS of breaches affecting fewer than 500 individuals within 60 days after the end of the calendar year in which the breach occurred.

Question 3

Which framework provides a risk-based approach to managing cybersecurity risk and was developed by NIST?

Accepted Answer

NIST Cybersecurity Framework (CSF)

Answer

The NIST Cybersecurity Framework (CSF) provides a voluntary, risk-based approach organized around five core functions: Identify, Protect, Detect, Respond, and Recover.

Question 4

An organization's third-party vendor suffers a data breach exposing customer data held on behalf of the organization. Under GDPR, the organization is classified as which role?

Accepted Answer

Data controller

Answer

The organization that determines the purposes and means of processing personal data is the data controller, even when a vendor (processor) handles the data on its behalf.

Question 5

Which U.S. law specifically governs the privacy of children's online data and requires verifiable parental consent for users under 13?

Accepted Answer

COPPA

Answer

The Children's Online Privacy Protection Act (COPPA) requires operators of websites directed at children under 13 to obtain verifiable parental consent before collecting personal information.

(CCCP) Certified Corporate Compliance Professional Practice Test

(CCCP) Certified Corporate Compliance Professional Practice Test

CCCP Technology & Data Compliance 2