Technology & Online Privacy Flashcards
6 cards from real CIPP/US practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Technology & Online Privacy flashcards as text
Under most U.S. state data breach notification laws, notification obligations are triggered when:
Answer: Personal information of state residents is compromised by unauthorized access or acquisition
State breach notification laws are generally triggered when personal information of state residents is acquired or accessed by an unauthorized party, creating a risk of harm.
The California Consumer Privacy Act (CCPA) grants California consumers the right to do which of the following?
Answer: Know, delete, and opt out of the sale of their personal information
The CCPA grants consumers the right to know what personal information is collected, the right to delete it, and the right to opt out of its sale to third parties.
Which federal law restricts the government's ability to compel disclosure of stored electronic communications held by service providers?
Answer: ECPA Stored Communications Act
The Stored Communications Act (Title II of ECPA) restricts voluntary disclosure by service providers and limits the government's ability to compel access to stored electronic communications.
Under the Computer Fraud and Abuse Act (CFAA), unauthorized access to a protected computer system is classified as:
Answer: A federal crime subject to criminal and civil liability
The CFAA makes unauthorized access to protected computers a federal crime and also provides a civil cause of action for victims.
Social media platforms have COPPA obligations when they have:
Answer: Actual knowledge that a particular user is under 13 years of age
COPPA applies to general audience sites and apps when the operator has actual knowledge that a user is under 13, even if the platform is not directed at children.
Which principle requires that personal data collected online be limited to what is directly relevant and necessary for the specific stated purpose?
Answer: Data minimization
Data minimization is the principle that organizations should collect only the minimum amount of personal data necessary to fulfill the stated purpose.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- assets.contentstack.io — Retake policy, score release, exam information · verified Nov 2026
- iapp.org — Registration deadline, score validity, passing score, registration, test dates · verified Oct 2026
- store.iapp.org — Test delivery, fees · verified Oct 2026
- pages.iapp.org — Exam format · verified Oct 2026