CyberVista Test CyberVista Data Security and Privacy 2

Question 1

Under GDPR, organizations are required to report a personal data breach to the supervisory authority within:

Accepted Answer

72 hours of discovery

Answer

GDPR Article 33 requires that a personal data breach likely to result in risk to individuals must be reported to the relevant supervisory authority within 72 hours of becoming aware of it.

Question 2

The California Consumer Privacy Act (CCPA) grants California residents the right to:

Accepted Answer

Know what personal information is collected and request its deletion

Answer

CCPA gives California residents the right to know what personal data is being collected, the right to delete it, the right to opt out of its sale, and the right to non-discrimination for exercising these rights.

Question 3

Which of the following is considered Protected Health Information (PHI) under HIPAA?

Accepted Answer

A patient's name combined with their medical diagnosis

Answer

PHI is individually identifiable health information that includes any combination of an identifier (such as a name) and health-related data (such as a diagnosis or treatment).

Question 4

Privacy by Design (PbD) is a framework that requires privacy to be:

Accepted Answer

Embedded into system design from the outset rather than retrofitted

Answer

Privacy by Design mandates that privacy protections be proactively built into technology and business processes from the earliest design stage, not added as an afterthought.

Question 5

The 'Right to be Forgotten' (Right to Erasure) under GDPR allows individuals to:

Accepted Answer

Request deletion of their personal data under certain conditions

Answer

GDPR Article 17 gives individuals the right to request erasure of their personal data when it is no longer necessary, consent is withdrawn, or the data was unlawfully processed.

CyberVista Test Practice Test

CyberVista Test Practice Test

CyberVista Test CyberVista Data Security and Privacy 2