RCMS Data Privacy & Protection Compliance 2

Question 1

Under CCPA, which of the following rights must be honored within 45 days of a verifiable consumer request?

Accepted Answer

Right to know and right to delete

Answer

CCPA requires businesses to fulfill verified right-to-know and right-to-delete requests within 45 days, with a possible 45-day extension.

Question 2

A company transfers EU resident data to a U.S. vendor without an adequacy decision. Which mechanism best legitimizes this transfer under GDPR?

Accepted Answer

Standard Contractual Clauses (SCCs)

Answer

SCCs are the most commonly used transfer mechanism after Privacy Shield was invalidated; they are pre-approved by the European Commission.

Question 3

Which HIPAA rule specifically governs the administrative, physical, and technical safeguards for electronic protected health information (ePHI)?

Accepted Answer

Security Rule

Answer

The HIPAA Security Rule sets standards for protecting ePHI through administrative, physical, and technical safeguards.

Question 4

A data processor suffers a breach affecting data it holds on behalf of a controller. Who bears primary GDPR notification responsibility to the supervisory authority?

Accepted Answer

The data controller, within 72 hours

Answer

Under GDPR Article 33, the data controller must notify the supervisory authority within 72 hours; the processor must notify the controller without undue delay.

Question 5

The concept of 'Privacy by Design' requires privacy protections to be embedded into systems at which stage?

Accepted Answer

From the earliest design and development stage

Answer

Privacy by Design mandates that privacy controls are built into products and processes from inception, not added as an afterthought.

(RCMS) Registered Compliance Management Specialist Certification Practice Test

(RCMS) Registered Compliance Management Specialist Certification Practice Test

RCMS Data Privacy & Protection Compliance 2