CSL Cybersecurity Regulations & Compliance 5

Question 1

Under GDPR, which legal basis allows an organization to process personal data without explicit consent when processing is necessary for the performance of a contract?

Accepted Answer

Contractual Necessity

Answer

GDPR Article 6(1)(b) permits processing without consent when it is necessary for performing a contract to which the data subject is a party.

Question 2

Which state was the first in the U.S. to enact a comprehensive data security law requiring businesses to implement reasonable security measures for personal information?

Accepted Answer

Massachusetts

Answer

Massachusetts enacted 201 CMR 17.00 in 2010, one of the earliest and most prescriptive state laws requiring a Written Information Security Program (WISP).

Question 3

The HIPAA Breach Notification Rule requires covered entities to notify affected individuals of a breach affecting unsecured PHI within what timeframe?

Accepted Answer

60 days of discovery

Answer

The HIPAA Breach Notification Rule requires covered entities to notify affected individuals without unreasonable delay and no later than 60 days following discovery of a breach.

Question 4

Under the Cybersecurity Information Sharing Act (CISA 2015), which protection is granted to private entities that voluntarily share cyber threat indicators with the federal government?

Accepted Answer

Safe harbor from antitrust and privacy liability

Answer

CISA 2015 grants liability protection (safe harbor) to companies that share cyber threat indicators and defensive measures with the government or other private entities.

Question 5

A company subject to the EU-U.S. Data Privacy Framework (DPF) must recertify with the U.S. Department of Commerce how frequently?

Accepted Answer

Annually

Answer

Organizations participating in the EU-U.S. Data Privacy Framework must self-certify and renew their certification annually with the Department of Commerce.

(CSL) Cybersecurity Law Certification Practice Test

(CSL) Cybersecurity Law Certification Practice Test

CSL Cybersecurity Regulations & Compliance 5