CCEP Data Privacy Compliance 4

Question 1

Which GDPR role has primary accountability for compliance with data protection obligations, even when using third-party processors?

Accepted Answer

Data Controller

Answer

The data controller determines the purposes and means of processing and retains primary accountability for GDPR compliance, including when processors are engaged.

Question 2

A hospital's business associate suffers a breach of 600 individuals' protected health information. Under HIPAA, what is the notification timeline to the Secretary of HHS?

Accepted Answer

Within 60 days of the calendar year end

Answer

For breaches affecting fewer than 500 individuals, HIPAA requires covered entities to notify HHS within 60 days of the end of the calendar year in which the breach occurred.

Question 3

Under Virginia's Consumer Data Protection Act (VCDPA), which of the following is NOT a right granted to Virginia consumers?

Accepted Answer

Right to private lawsuit for violations

Answer

The VCDPA does not include a private right of action; enforcement is handled exclusively by the Virginia Attorney General.

Question 4

Which concept in privacy law holds that individuals should be notified about data collection practices and have a choice about how their information is used?

Accepted Answer

Notice and choice

Answer

Notice and choice is a foundational privacy principle requiring that individuals be informed about data practices and given meaningful options about the use of their personal information.

Question 5

An organization subject to GDPR appoints a Data Protection Officer (DPO). Which of the following actions by the organization would violate GDPR Article 38?

Accepted Answer

Dismissing the DPO for providing advice that conflicts with business objectives

Answer

GDPR Article 38(3) protects DPOs from dismissal or penalty for performing their tasks, ensuring independence; penalizing a DPO for providing unfavorable advice violates this protection.

(CCEP) Certified Compliance and Ethics Professional Practice Test

(CCEP) Certified Compliance and Ethics Professional Practice Test

CCEP Data Privacy Compliance 4