GRC Regulatory and Legal Compliance 4

Question 1

Under the Americans with Disabilities Act (ADA), which title specifically prohibits discrimination by private employers with 15 or more employees?

Accepted Answer

Title I

Answer

ADA Title I prohibits private employers with 15 or more employees from discriminating against qualified individuals with disabilities in employment.

Question 2

A healthcare organization receives a subpoena for patient records. Under HIPAA, what should be the organization's first step before disclosing the records?

Accepted Answer

Notify the patient and provide an opportunity to object

Answer

HIPAA requires covered entities to notify the patient and give them a chance to object before disclosing PHI in response to a subpoena not accompanied by a court order.

Question 3

The concept of 'privacy by design' in regulatory compliance requires that privacy protections be integrated at which stage of system development?

Accepted Answer

From the earliest design phase onward

Answer

Privacy by design mandates that privacy protections be embedded into systems and processes from the beginning of development, not added as an afterthought.

Question 4

Which regulatory body oversees compliance with the Fair Credit Reporting Act (FCRA) for most entities?

Accepted Answer

Consumer Financial Protection Bureau (CFPB)

Answer

The Consumer Financial Protection Bureau (CFPB) has primary enforcement authority over the FCRA for most entities that use or furnish consumer reports.

Question 5

An organization implements a compliance training program but employees later repeat the same violations. According to the DOJ's guidance on effective compliance programs, what is the most likely deficiency?

Accepted Answer

Training that is not reinforced through consistent enforcement and discipline

Answer

The DOJ emphasizes that training must be supported by consistent disciplinary action; without enforcement, employees learn that policies are not seriously enforced.

(GRC) Governance, Risk, and Compliance Certification Practice Test

(GRC) Governance, Risk, and Compliance Certification Practice Test

GRC Regulatory and Legal Compliance 4