CIPT Certified Information Privacy Technologist: Data Privacy Frameworks and Models 3

Question 1

A U.S. healthcare organization is evaluating privacy frameworks. Which framework is specifically designed for health information and mandates a Notice of Privacy Practices?

Accepted Answer

HIPAA Privacy Rule

Answer

The HIPAA Privacy Rule requires covered entities to provide patients with a Notice of Privacy Practices describing how PHI is used and disclosed.

Question 2

Which privacy engineering objective focuses on limiting the ability of systems to link data to specific individuals across contexts?

Accepted Answer

Disassociability

Answer

Disassociability is the privacy engineering objective aimed at ensuring data cannot be linked or associated with individuals beyond what is necessary.

Question 3

In Privacy by Design, which foundational principle states that privacy must be proactive rather than reactive?

Accepted Answer

Proactive not reactive; preventive not remedial

Answer

Ann Cavoukian's first principle of Privacy by Design emphasizes anticipating and preventing privacy issues before they occur.

Question 4

An e-commerce platform stores customer purchase history indefinitely 'just in case it is useful later.' Which privacy principle does this most directly violate?

Accepted Answer

Purpose specification

Answer

Purpose specification requires that the purposes for which data is collected be specified before collection; storing data for vague future use violates this.

Question 5

Which GDPR mechanism allows a company with entities in multiple EU member states to deal with a single lead supervisory authority?

Accepted Answer

The One-Stop-Shop mechanism

Answer

The One-Stop-Shop mechanism under GDPR allows multinational companies to engage primarily with the supervisory authority of their EU main establishment.

CIPT - Certified Information Privacy Technologist Practice Test

CIPT - Certified Information Privacy Technologist Practice Test

CIPT Certified Information Privacy Technologist: Data Privacy Frameworks and Models 3