RCC RCC Data Privacy and Information Security Compliance 1

Question 1

Under the California Consumer Privacy Act (CCPA), consumers have the right to:

Accepted Answer

Know what personal information is collected about them and request its deletion

Answer

Delete all records held by a business at any time regardless of law

Answer

Prohibit businesses from collecting any data

Answer

Sue businesses for any data collection without prior notice

Question 2

Which US federal law governs the privacy of student educational records?

Accepted Answer

FERPA (Family Educational Rights and Privacy Act)

Answer

HIPAA

Answer

GLBA

Answer

COPPA

Question 3

A 'data breach notification' requirement typically obligates an organization to:

Accepted Answer

Notify affected individuals and relevant authorities within a specified timeframe after discovering a breach

Answer

Notify only the affected individuals within one year

Answer

Conduct an internal investigation and keep results confidential

Answer

Pay a fixed regulatory fine without further obligation

Question 4

What does 'data minimization' mean in a privacy compliance context?

Accepted Answer

Collecting only the personal data necessary for the specified purpose

Answer

Compressing data files to reduce storage costs

Answer

Deleting all data older than one year

Answer

Limiting data access to senior management only

Question 5

HIPAA's Security Rule applies specifically to:

Accepted Answer

Electronic protected health information (ePHI) held by covered entities and their business associates

Answer

All personal data held by any US employer

Answer

Medical devices sold by manufacturers

Answer

Insurance claims submitted on paper only

Question 6

A 'Privacy Impact Assessment (PIA)' is MOST useful for:

Accepted Answer

Identifying and addressing privacy risks before launching a new program or technology

Answer

Calculating the cost of data breach litigation

Answer

Auditing completed projects for past privacy violations

Answer

Training employees on privacy policies