CDS Regulatory Compliance & Data Privacy 2

Question 1

Under CCPA, which right allows California consumers to prevent businesses from selling their personal information to third parties?

Accepted Answer

Right to Opt-Out

Answer

CCPA grants consumers the Right to Opt-Out, allowing them to direct businesses not to sell their personal information to third parties.

Question 2

A data steward discovers that a vendor processes EU resident data without a valid data transfer mechanism. Which action is the MOST appropriate immediate step?

Accepted Answer

Suspend data transfers until a lawful mechanism is established

Answer

Suspending transfers until a valid mechanism (SCCs, adequacy decision, BCRs) is in place prevents ongoing GDPR violations while allowing time to remediate.

Question 3

HIPAA's Minimum Necessary Standard requires covered entities to:

Accepted Answer

Limit PHI access and disclosures to the least amount needed for the purpose

Answer

The Minimum Necessary Standard mandates that only the amount of PHI reasonably needed to accomplish the intended purpose should be used or disclosed.

Question 4

Which GDPR lawful basis would a company MOST likely rely on when processing employee payroll data?

Accepted Answer

Legal obligation

Answer

Processing payroll data is required to comply with tax and employment laws, making legal obligation the most appropriate lawful basis.

Question 5

Under PCI DSS, what is the PRIMARY purpose of network segmentation?

Accepted Answer

To reduce the scope of the cardholder data environment

Answer

Network segmentation isolates the cardholder data environment (CDE), reducing the scope of systems subject to PCI DSS compliance requirements.

(CDS) Certified Data Steward Practice Test

(CDS) Certified Data Steward Practice Test

CDS Regulatory Compliance & Data Privacy 2