CSL Data Protection & Privacy Laws 3

Question 1

A breach notification requirement under HIPAA's Breach Notification Rule generally mandates notifying affected individuals within how many days of discovering a breach?

Accepted Answer

60 days

Answer

HIPAA's Breach Notification Rule requires covered entities to notify affected individuals without unreasonable delay and within 60 days of discovery.

Question 2

The GDPR's 'legitimate interests' lawful basis for processing personal data requires which balancing test?

Accepted Answer

Weighing the controller's interests against the data subject's rights and freedoms

Answer

Legitimate interests (GDPR Article 6(1)(f)) requires a three-part test balancing the controller's purpose, necessity, and the data subject's overriding interests.

Question 3

Under the California Privacy Rights Act (CPRA), which new category of sensitive personal information receives heightened protection?

Accepted Answer

Social Security numbers, precise geolocation, and racial or ethnic origin

Answer

The CPRA introduced a 'sensitive personal information' category including SSNs, precise geolocation, racial origin, and health data with additional consumer rights.

Question 4

Which federal law governs the privacy of student education records maintained by schools receiving federal funding?

Accepted Answer

FERPA

Answer

The Family Educational Rights and Privacy Act (FERPA) protects the privacy of student education records at federally funded institutions.

Question 5

A GDPR Data Protection Impact Assessment (DPIA) is mandatory when processing is likely to result in what?

Accepted Answer

A high risk to the rights and freedoms of natural persons

Answer

GDPR Article 35 requires a DPIA when processing is likely to result in a high risk to individuals' rights and freedoms, such as large-scale profiling.

(CSL) Cybersecurity Law Certification Practice Test

(CSL) Cybersecurity Law Certification Practice Test

CSL Data Protection & Privacy Laws 3