IGP Records Management & Data Privacy 5

Question 1

What is 'consent fatigue' in the context of data privacy, and why is it a concern?

Accepted Answer

Users habitually accepting consent requests without reading them, undermining informed consent

Answer

Consent fatigue occurs when users are presented with so many consent requests that they stop reading and simply click 'accept,' making consent less meaningful as a privacy protection.

Question 2

Under the FTC Act, what standard has the FTC used to regulate data privacy practices of US companies?

Accepted Answer

Unfair or deceptive acts or practices, including failing to honor stated privacy policies

Answer

The FTC uses its Section 5 authority to take action against unfair or deceptive practices, including when companies violate their own privacy policies or fail to adequately protect consumer data.

Question 3

Which element is typically NOT included in a Data Processing Agreement (DPA) between a controller and processor?

Accepted Answer

The processor's marketing strategy for the data

Answer

DPAs under GDPR Article 28 must include processing scope, security measures, and rights/obligations, but a processor's marketing strategy for the data would violate the purpose limitation principle.

Question 4

What is the significance of 'chain of custody' documentation for records in legal proceedings?

Accepted Answer

It establishes that records have been controlled and preserved without unauthorized alteration

Answer

Chain of custody documentation tracks who had possession of records and what was done with them, establishing that the records were not tampered with and are admissible as evidence.

Question 5

An organization in California collects personal data from 80,000 consumers annually. Under CCPA, which obligation applies?

Accepted Answer

The organization must provide notice, opt-out rights, and a privacy policy meeting CCPA requirements

Answer

A business that buys, sells, receives, or shares the personal information of 100,000 or more consumers or households annually is subject to CCPA—80,000 alone may not trigger the threshold but combined factors could, and notice/opt-out requirements apply when thresholds are met.

(IGP) Information Governance Professional Practice Test

(IGP) Information Governance Professional Practice Test

IGP Records Management & Data Privacy 5