(US) Flashcards

Under the California Consumer Privacy Act (CCPA), which right allows consumers to prevent a business from selling their personal information to third parties?

Answer: Right to opt-out

The CCPA grants consumers the right to opt-out of the sale of their personal information to third parties.

Which federal law establishes privacy protections for students' education records and limits disclosure without parental consent?

Answer: FERPA

FERPA (Family Educational Rights and Privacy Act) protects the privacy of student education records and gives parents certain rights.

A hospital shares patient data with a business associate for billing purposes. Under HIPAA, what document must govern this relationship?

Answer: Business associate agreement

HIPAA requires a Business Associate Agreement (BAA) between a covered entity and any business associate that handles PHI.

The FTC's enforcement authority over privacy primarily derives from which legal provision?

Answer: Section 5 of the FTC Act prohibiting unfair or deceptive acts

The FTC uses Section 5 of the FTC Act, which prohibits unfair or deceptive practices, as its primary tool to enforce privacy commitments.

Which amendment to the U.S. Constitution has courts most frequently applied to establish a constitutional right to privacy?

Answer: Fourth Amendment

The Fourth Amendment's protection against unreasonable searches and seizures is most commonly cited in constitutional privacy analysis.

Under COPPA, operators of websites directed to children under 13 must obtain verifiable parental consent before collecting personal information. Which of the following is an acceptable verification method?

Answer: A signed consent form sent via email or postal mail

COPPA accepts a signed parental consent form (paper or electronic) as a verifiable method of obtaining parental consent.

Which principle from the Fair Information Practice Principles (FIPPs) requires that personal data be collected only for specified purposes and not used in ways incompatible with those purposes?

Answer: Purpose limitation

Purpose limitation restricts the use of personal data to the specific purposes disclosed at the time of collection.