CIPT Certified Information Privacy Technologist: Privacy Regulations and Compliance Practice 3

Question 1

A data processor experiences a breach affecting EU residents' data. Under GDPR, within what timeframe must the processor notify the controller?

Accepted Answer

Without undue delay

Answer

Under GDPR Article 33(2), processors must notify controllers of a personal data breach without undue delay after becoming aware of it, without a specific hour limit for processor-to-controller notification.

Question 2

Which U.S. federal sector-specific law primarily governs the privacy of student education records?

Accepted Answer

FERPA

Answer

The Family Educational Rights and Privacy Act (FERPA) protects the privacy of student education records and gives parents (or eligible students) the right to access and correct those records.

Question 3

Under the Colorado Privacy Act (CPA), what is the maximum civil penalty per intentional violation?

Accepted Answer

$7,500

Answer

The Colorado Privacy Act allows the Attorney General to seek civil penalties of up to $20,000 per violation, but enforcement is similar to other state laws with a 60-day cure period in some circumstances.

Question 4

An organization subject to GDPR wants to transfer personal data to a country without an adequacy decision. Which mechanism allows transfer to a new vendor without individual consent?

Accepted Answer

Standard contractual clauses

Answer

Standard contractual clauses (SCCs) are a widely used GDPR-approved mechanism that allow personal data transfers to third countries without adequacy decisions without requiring individual data subject consent.

Question 5

Under CCPA/CPRA, which consumer right was newly added by the California Privacy Rights Act (CPRA)?

Accepted Answer

Right to correct inaccurate personal information

Answer

The CPRA, which amended CCPA, added the right to correct inaccurate personal information as a new consumer right not present in the original CCPA.

CIPT - Certified Information Privacy Technologist Practice Test

CIPT - Certified Information Privacy Technologist Practice Test

CIPT Certified Information Privacy Technologist: Privacy Regulations and Compliance Practice 3