GRC Regulatory and Legal Compliance 3

Question 1

Under GDPR, what is the maximum timeframe within which a data breach must be reported to the supervisory authority after the controller becomes aware of it?

Accepted Answer

72 hours

Answer

GDPR Article 33 requires notification to the supervisory authority within 72 hours of becoming aware of a personal data breach.

Question 2

The Children's Online Privacy Protection Act (COPPA) applies to websites and online services directed to children under what age?

Accepted Answer

13

Answer

COPPA protects the online privacy of children under 13 by requiring verifiable parental consent before collecting their personal information.

Question 3

An organization wants to transfer personal data from the EU to a country without an adequacy decision. Which mechanism provides an appropriate safeguard under GDPR?

Accepted Answer

Standard Contractual Clauses (SCCs)

Answer

Standard Contractual Clauses (SCCs) are pre-approved contractual mechanisms that provide adequate safeguards for transferring personal data outside the EU.

Question 4

Which provision of the Gramm-Leach-Bliley Act (GLBA) requires financial institutions to develop a written information security program?

Accepted Answer

Safeguards Rule

Answer

The GLBA Safeguards Rule requires financial institutions to implement a comprehensive written information security program to protect customer financial information.

Question 5

In a compliance program, a 'whistleblower hotline' is primarily designed to satisfy which element of an effective compliance program?

Accepted Answer

Reporting mechanisms

Answer

Whistleblower hotlines serve as anonymous reporting mechanisms that allow employees to report potential violations without fear of retaliation.

(GRC) Governance, Risk, and Compliance Certification Practice Test

(GRC) Governance, Risk, and Compliance Certification Practice Test

GRC Regulatory and Legal Compliance 3