RCMS Data Privacy & Protection Compliance 4

Question 1

When a company uses personal data collected for marketing purposes to later conduct fraud investigations, this violates which data protection principle?

Accepted Answer

Purpose limitation

Answer

Purpose limitation prohibits using personal data for purposes incompatible with those originally specified at collection.

Question 2

A healthcare organization must conduct a risk analysis under HIPAA Security Rule. Which of the following best describes the scope of this analysis?

Accepted Answer

All potential risks and vulnerabilities to the confidentiality, integrity, and availability of ePHI

Answer

The HIPAA Security Rule requires an accurate and thorough assessment of all potential risks to ePHI across all systems and processes.

Question 3

Which legal basis under GDPR Article 6 is most appropriate when processing is necessary for compliance with a legal obligation to which the controller is subject?

Accepted Answer

Legal obligation (Art. 6(1)(c))

Answer

Article 6(1)(c) covers processing necessary for compliance with a legal obligation of the controller under EU or member state law.

Question 4

The Colorado Privacy Act (CPA) grants consumers the right to opt out of personal data processing for which of the following purposes?

Accepted Answer

Targeted advertising, sale of personal data, and profiling for significant decisions

Answer

Colorado's CPA grants opt-out rights for targeted advertising, sale of personal data, and profiling in furtherance of decisions with legal or significant effects.

Question 5

A compliance officer is designing a data retention schedule. Which factor is LEAST relevant to determining the appropriate retention period for personal data?

Accepted Answer

The number of employees in the organization

Answer

Employee count does not determine data retention periods; legal requirements, business need, and contractual obligations are the primary drivers.

(RCMS) Registered Compliance Management Specialist Certification Practice Test

(RCMS) Registered Compliance Management Specialist Certification Practice Test

RCMS Data Privacy & Protection Compliance 4