CCB CCB Data Privacy & Information Security Compliance

Question 1

Under the California Consumer Privacy Act (CCPA), what right allows consumers to request deletion of their personal information?

Accepted Answer

Right to erasure

Answer

The CCPA grants consumers the right to request deletion (erasure) of personal information collected by a business, subject to certain exceptions.

Question 2

Which U.S. federal law establishes minimum data security standards for financial institutions, including safeguard rules for customer information?

Accepted Answer

Gramm-Leach-Bliley Act (GLBA)

Answer

The Gramm-Leach-Bliley Act (GLBA) requires financial institutions to implement safeguards to protect customers' nonpublic personal information.

Question 3

A data breach notification requirement typically mandates reporting within how many hours under U.S. federal banking regulations?

Accepted Answer

36 hours

Answer

The FFIEC/OCC Computer-Security Incident Notification Rule requires banking organizations to notify their primary federal regulator within 36 hours of discovering a significant cybersecurity incident.

Question 4

Which of the following best describes 'data minimization' as a privacy compliance principle?

Accepted Answer

Collecting only data necessary for a specific purpose

Answer

Data minimization requires organizations to collect only the personal data that is adequate, relevant, and limited to what is necessary for the stated purpose.

Question 5

In the context of information security compliance, what does a 'data inventory' primarily help an organization accomplish?

Accepted Answer

Map where personal data is collected, stored, and shared

Answer

A data inventory (or data map) identifies what personal data an organization holds, where it resides, how it flows, and who has access — foundational to privacy compliance.

(CCB) Certified Compliance and Business Specialist Practice Test

(CCB) Certified Compliance and Business Specialist Practice Test

CCB CCB Data Privacy & Information Security Compliance