Certified Information Privacy Professional Online Privacy and Technology

Question 1

Under COPPA, what must operators of child-directed websites obtain before collecting personal information from children under 13?

Accepted Answer

Verifiable parental consent

Answer

COPPA requires operators to obtain verifiable parental consent before collecting, using, or disclosing personal information from children under 13.

Question 2

Which law regulates the interception of electronic communications during transmission in the United States?

Accepted Answer

Electronic Communications Privacy Act (ECPA) — Wiretap Act

Answer

Title I of ECPA, known as the Wiretap Act, prohibits the intentional interception of wire, oral, or electronic communications during transmission.

Question 3

What standard does the CAN-SPAM Act establish for commercial email senders?

Accepted Answer

Opt-out framework requiring unsubscribe mechanisms and accurate sender information

Answer

CAN-SPAM establishes an opt-out framework, requiring accurate headers, functioning unsubscribe mechanisms, and physical address disclosure but not prior consent.

Question 4

Under the Computer Fraud and Abuse Act (CFAA), what is a core prohibited activity?

Accepted Answer

Accessing a computer without authorization or exceeding authorized access

Answer

The CFAA's core prohibition targets unauthorized access to computers and accessing computers in excess of authorization.

Question 5

Which FTC Act provision is primarily used to regulate unfair or deceptive online privacy practices?

Accepted Answer

Section 5 prohibiting unfair or deceptive acts or practices

Answer

FTC Section 5, prohibiting unfair or deceptive acts or practices, is the primary authority the FTC uses to enforce privacy commitments and challenge deceptive privacy practices.

Certified Information Privacy Professional Practice Test

Certified Information Privacy Professional Practice Test

Certified Information Privacy Professional Online Privacy and Technology