CIPP (US) 3

Question 1

The Gramm-Leach-Bliley Act (GLBA) requires financial institutions to provide customers with a privacy notice. When must this notice be provided at the latest?

Accepted Answer

At the time of establishing a customer relationship

Answer

GLBA requires financial institutions to provide an initial privacy notice at the time of establishing a customer relationship.

Question 2

A company suffers a data breach exposing Social Security numbers of 600 Vermont residents. Vermont's breach notification law requires notification within 45 days. Which law governs if the federal standard differs?

Accepted Answer

The stricter state law applies to residents of that state

Answer

In the absence of a federal breach notification standard, the stricter state law applies to residents of that state.

Question 3

Under the Health Insurance Portability and Accountability Act, which type of PHI disclosure does NOT require patient authorization?

Accepted Answer

Disclosure for treatment, payment, or healthcare operations

Answer

HIPAA permits covered entities to use or disclose PHI for treatment, payment, and healthcare operations without patient authorization.

Question 4

Which U.S. privacy framework requires federal agencies to maintain accurate records, provide individuals access to their records, and limit disclosure of those records?

Accepted Answer

The Privacy Act of 1974

Answer

The Privacy Act of 1974 governs federal agency collection, maintenance, use, and dissemination of personally identifiable information.

Question 5

A consumer reporting agency provides a credit report to an employer. Under the FCRA, what must the employer do before taking adverse action based on the report?

Accepted Answer

Provide the consumer a copy of the report and a summary of FCRA rights

Answer

Under FCRA, employers must provide a pre-adverse action disclosure including a copy of the report and an FCRA summary of rights before taking adverse action.

Certified Information Privacy Professional Practice Test

Certified Information Privacy Professional Practice Test

CIPP (US) 3