CIPP/US Technology & Online Privacy 1 — Questions and Answers
Question 1: Under COPPA, operators of websites or online services directed to children must obtain verifiable parental consent before collecting personal information from children under what age?
- Under 13 (Correct answer)
- Under 16
- Under 18
- Under 21
Correct answer: Under 13
COPPA protects children under 13 by requiring verifiable parental consent before operators collect, use, or disclose their personal information.
Question 2: Which federal law primarily governs online privacy protections for children in the United States?
- FERPA
- COPPA (Correct answer)
- HIPAA
- GLBA
Correct answer: COPPA
The Children's Online Privacy Protection Act (COPPA) is the primary federal law governing online data collection from children under 13.
Question 3: The CAN-SPAM Act requires commercial email senders to include which of the following in every message?
- Opt-in confirmation from each recipient
- A clear and conspicuous opt-out mechanism (Correct answer)
- End-to-end encryption of message content
- Prior written consent from all recipients
Correct answer: A clear and conspicuous opt-out mechanism
CAN-SPAM requires that all commercial emails include a functioning opt-out mechanism that must be honored within 10 business days.
Question 4: Which California law requires website operators to post a privacy policy that discloses whether they honor 'Do Not Track' browser signals?
- CalOPPA (Correct answer)
- CCPA
- CPRA
- California Shine the Light Law
Correct answer: CalOPPA
The California Online Privacy Protection Act (CalOPPA) requires operators of commercial websites to conspicuously post a privacy policy and disclose their response to Do Not Track signals.
Question 5: The Electronic Communications Privacy Act (ECPA) primarily regulates which of the following?
- Interception of wire, oral, and electronic communications (Correct answer)
- Collection of children's online data
- Sharing of financial information among affiliates
- Healthcare data breach notifications
Correct answer: Interception of wire, oral, and electronic communications
ECPA regulates government and private interception of wire, oral, and electronic communications, as well as access to stored electronic communications.
Question 6: Under the Video Privacy Protection Act (VPPA), a video service provider generally cannot disclose a consumer's video rental or viewing history without:
- A written request from law enforcement
- The consumer's informed, written consent or a court order (Correct answer)
- Prior notice posted on its website
- An arbitration agreement signed by the consumer
Correct answer: The consumer's informed, written consent or a court order
The VPPA prohibits video tape service providers from disclosing personally identifiable information about rental or purchase records without the consumer's informed written consent or a court order.
CIPP/US Technology & Online Privacy 1
Under COPPA, operators of websites or online services directed to children must obtain verifiable parental consent before collecting personal information from children under what age?