CIPT Certified Information Privacy Technologist: Privacy Regulations and Compliance Practice 2

Question 1

Under the California Consumer Privacy Act (CCPA), which threshold triggers the law's applicability to a for-profit business?

Accepted Answer

Annual gross revenue exceeding $25 million

Answer

CCPA applies to for-profit businesses that meet at least one of three thresholds: annual gross revenue exceeding $25 million, buying/selling/receiving/sharing personal information of 100,000+ consumers/households annually, or deriving 50%+ of annual revenue from selling consumers' personal information.

Question 2

Which GDPR article establishes the right to data portability?

Accepted Answer

Article 20

Answer

Article 20 of the GDPR grants data subjects the right to receive their personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Question 3

A company processes employee health data for workplace safety compliance. Under HIPAA, which entity type classification would typically apply?

Accepted Answer

Hybrid entity

Answer

A hybrid entity is an organization that performs both covered and non-covered functions; it can designate only its healthcare components as subject to HIPAA requirements.

Question 4

Under the EU-U.S. Data Privacy Framework, what must a U.S. organization do to legitimately receive personal data transferred from the EU?

Accepted Answer

Self-certify with the U.S. Department of Commerce

Answer

Organizations must self-certify their adherence to the EU-U.S. Data Privacy Framework Principles with the U.S. Department of Commerce to lawfully receive personal data from EU entities.

Question 5

Which provision of the Children's Online Privacy Protection Act (COPPA) requires operators to provide notice?

Accepted Answer

Operators must post a privacy policy describing their information practices for children under 13

Answer

COPPA requires operators of websites or online services directed to children under 13 to post a clear and comprehensive privacy policy describing their information practices.

CIPT - Certified Information Privacy Technologist Practice Test

CIPT - Certified Information Privacy Technologist Practice Test

CIPT Certified Information Privacy Technologist: Privacy Regulations and Compliance Practice 2