CSC CSC - Cybersecurity Compliance Data Privacy and Breach Notification Laws Questions and Answers 2

Question 1

What is the maximum number of days most U.S. state breach notification laws require businesses to notify affected individuals after discovering a breach?

Accepted Answer

30 to 90 days depending on state law

Answer

U.S. state breach notification deadlines vary, but most fall between 30 and 90 days from discovery, with some states like Florida mandating 30 days.

Question 2

Under which federal law must covered entities notify the HHS Secretary and affected individuals within 60 days of discovering a breach of unsecured protected health information?

Accepted Answer

HIPAA Breach Notification Rule

Answer

The HIPAA Breach Notification Rule requires covered entities to notify affected individuals, HHS, and sometimes media within 60 days of discovering a breach.

Question 3

Which of the following would likely trigger a state data breach notification requirement in the U.S.?

Accepted Answer

Unauthorized access to unencrypted Social Security numbers

Answer

Most state breach notification laws are triggered by unauthorized acquisition of unencrypted personal information such as SSNs, not encrypted data or internal authorized access.

Question 4

What is the 'safe harbor' provision in the context of U.S. data breach notification laws?

Accepted Answer

An exemption from notification when breached data was encrypted

Answer

Most state breach notification laws provide a safe harbor exempting organizations from notification duties if the breached data was encrypted and the decryption key was not also compromised.

Question 5

Which type of personal information is most commonly covered by U.S. state breach notification statutes?

Accepted Answer

Name combined with SSN, financial account number, or driver's license number

Answer

U.S. state breach notification laws typically protect combinations of an individual's name with sensitive identifiers like SSN, account numbers, or driver's license numbers.

(CSC) Cybersecurity Compliance Certification Practice Test

(CSC) Cybersecurity Compliance Certification Practice Test

CSC CSC - Cybersecurity Compliance Data Privacy and Breach Notification Laws Questions and Answers 2