RCC RCC Data Privacy and Information Security Compliance

Question 1

Under the California Consumer Privacy Act (CCPA), consumers have the right to:

Accepted Answer

Know what personal information is collected about them and request its deletion

Answer

The CCPA grants California consumers rights to know about, access, delete, and opt out of the sale of their personal information, with some exceptions.

Question 2

Which US federal law governs the privacy of student educational records?

Accepted Answer

FERPA (Family Educational Rights and Privacy Act)

Answer

FERPA protects the privacy of student education records and grants parents and eligible students rights to access and control those records.

Question 3

A 'data breach notification' requirement typically obligates an organization to:

Accepted Answer

Notify affected individuals and relevant authorities within a specified timeframe after discovering a breach

Answer

Most US state data breach laws and sector-specific regulations require timely notification to affected individuals and, in many cases, state attorneys general or sector regulators.

Question 4

What does 'data minimization' mean in a privacy compliance context?

Accepted Answer

Collecting only the personal data necessary for the specified purpose

Answer

Data minimization is a privacy principle requiring organizations to collect and retain only the personal data that is necessary and proportionate to the purpose for which it was collected.

Question 5

HIPAA's Security Rule applies specifically to:

Accepted Answer

Electronic protected health information (ePHI) held by covered entities and their business associates

Answer

The HIPAA Security Rule establishes national standards for protecting ePHI that is created, received, used, or maintained by covered entities and business associates.

(RCC) Regulatory Compliance Certification Practice Test

(RCC) Regulatory Compliance Certification Practice Test

RCC RCC Data Privacy and Information Security Compliance