Practice Test GeeksCDO - Chief Data Officer Certification Practice Test
← All CDO Flashcard Decks

Regulatory Policy & Ethical Standards Flashcards

7 cards from real CDO practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Regulatory Policy & Ethical Standards flashcards as text

  1. Under the CCPA as amended by the CPRA, which agency was created to implement and enforce California consumer privacy law?

    Answer: California Privacy Protection Agency

    The CPRA established the California Privacy Protection Agency (CPPA) as a dedicated privacy regulator.

  2. What is the maximum administrative fine for the most serious GDPR infringements?

    Answer: €20 million or 4% of global annual turnover, whichever is higher

    GDPR Article 83(5) sets the upper tier at €20 million or 4% of worldwide annual turnover, whichever is greater.

  3. A U.S. company transfers EU employee data to its U.S. headquarters. Which mechanism can legitimize this transfer if the company is not self-certified under the EU-U.S. Data Privacy Framework?

    Answer: Standard Contractual Clauses

    Standard Contractual Clauses approved by the European Commission are a recognized safeguard for transfers to third countries.

  4. Which U.S. law requires verifiable parental consent before collecting personal information online from children under 13?

    Answer: COPPA

    The Children's Online Privacy Protection Act requires verifiable parental consent for collecting data from children under 13.

  5. BCBS 239 principles primarily aim to strengthen which capability at large banks?

    Answer: Risk data aggregation and risk reporting

    BCBS 239 sets principles for effective risk data aggregation and risk reporting at systemically important banks.

  6. Under HIPAA's Breach Notification Rule, a breach affecting more than 500 residents of a state requires notification to which party in addition to individuals and HHS?

    Answer: Prominent media outlets serving that state

    Breaches affecting more than 500 residents of a state or jurisdiction require notice to prominent media outlets serving that area.

  7. Which principle of 'privacy by design' best describes configuring systems so the most privacy-protective settings apply automatically?

    Answer: Privacy as the default setting

    Privacy as the default ensures personal data is protected automatically without requiring user action.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy