Certified Information Privacy Professional Data Breach Notification Laws 3

Question 1

Which US federal agency serves as the primary enforcer of financial institution data breach obligations under the GLBA Safeguards Rule?

Accepted Answer

FTC (for non-bank financial institutions)

Answer

SEC

Answer

CFPB

Answer

OCC

Question 2

Under the 2023 FTC Safeguards Rule amendment, non-banking financial institutions must notify the FTC of breaches affecting how many customers?

Accepted Answer

500 or more customers

Answer

1,000 or more customers

Answer

100 or more customers

Answer

All breaches regardless of size

Question 3

What is the primary criticism of having 50 different state breach notification laws instead of a single federal law?

Accepted Answer

Compliance complexity and inconsistent requirements across states

Answer

Too much consumer protection

Answer

Lack of any notification requirements

Answer

Excessive federal government oversight

Question 4

Which type of information was added to many states' breach notification laws following high-profile biometric data breaches?

Accepted Answer

Biometric data (fingerprints, facial recognition)

Answer

Home addresses

Answer

Email addresses alone

Answer

Vehicle registration numbers

Question 5

Under HIPAA's Breach Notification Rule, which standard determines whether an incident is a 'breach' requiring notification?

Accepted Answer

Whether the PHI was accessed in an unauthorized manner posing low probability of compromise

Answer

Whether any employee viewed the data

Answer

Whether the organization's revenue exceeded $1 million

Answer

Whether the breach was reported in the news

Question 6

Which US state law requires notification to the state attorney general before or simultaneously with notifying consumers?

Accepted Answer

New York SHIELD Act

Answer

California SB 1386

Answer

Texas Identity Theft Enforcement Act

Answer

Florida DBNA