Matt went into his son’s bedroom one evening and found him stretched out on his bed typing on his laptop. “Doing your network?
SCENARIO Please use the following to answer the next question: Matt went into his son’s bedroom one evening and found him stretched out on his bed typing on his laptop. “Doing your network?” Matt asked hopefully. “No,” the boy said. “I’m filling out a survey.” Matt looked over his son’s...
What is the most likely way that Declan might directly violate the Health Insurance Portability and Accountability Act (HIPAA)?
SCENARIO Please use the following to answer the next question: Declan has just started a job as a nursing assistant in a radiology department at Woodland Hospital. He has also started a program to become a registered nurse. Before taking this career path, Declan was vaguely familiar with the Health...
Under the GDPR, the complainant’s request regarding her personal information is known as what?
SCENARIO Please use the following to answer the next question: A US-based startup company is selling a new gaming application. One day, the CEO of the company receives an urgent letter from a prominent EU-based retail partner. Triggered by an unresolved complaint lodged by an EU resident, the letter describes...
What is the most effective kind of training CloudHealth could have given its employees to help prevent this type of data breach?
SCENARIO Please use the following to answer the next question: You are the chief privacy officer at HealthCo, a major hospital in a large U.S. city in state A. HealthCo is a HIPAA-covered entity that provides healthcare services to more than 100,000 patients. A third-party cloud computing service provider, CloudHealth,...
Which authority supervises and enforces laws regarding advertising to children via the Internet?
Which authority supervises and enforces laws regarding advertising to children via the Internet?A . The Office for Civil RightsB . The Federal Trade CommissionC . The Federal Communications CommissionD . The Department of Homeland SecurityView AnswerAnswer: B Explanation: Reference: https://www.ftc.gov/sites/default/files/documents/public_statements/advertising-kids-and-ftc-regulatory-retrospective-advises-present/040802adstokids.pdf
What is the least important factor for the company to consider when selecting the vendor?
A large online bookseller decides to contract with a vendor to manage Personal Information (PI). What is the least important factor for the company to consider when selecting the vendor?A . The vendor’s reputationB . The vendor’s financial healthC . The vendor’s employee retention ratesD . The vendor’s employee training...
In 2014, Google was alleged to have violated the Family Educational Rights and Privacy Act (FERPA) through its Apps for Education suite of tools. For what specific practice did students sue the company?
In 2014, Google was alleged to have violated the Family Educational Rights and Privacy Act (FERPA) through its Apps for Education suite of tools. For what specific practice did students sue the company?A . Scanning emails sent to and received by studentsB . Making student education records publicly availableC ....
Under the Telemarketing Sales Rule, what characteristics of consent must be in place for an organization to acquire an exception to the Do-Not-Call rules for a particular consumer?
Under the Telemarketing Sales Rule, what characteristics of consent must be in place for an organization to acquire an exception to the Do-Not-Call rules for a particular consumer?A . The consent must be in writing, must state the times when calls can be made to the consumer and must be...
Of the safeguards required by the HIPAA Security Rule, which of the following is NOT at issue due to HealthCo’s actions?
SCENARIO Please use the following to answer the next question: You are the chief privacy officer at HealthCo, a major hospital in a large U.S. city in state A. HealthCo is a HIPAA-covered entity that provides healthcare services to more than 100,000 patients. A third-party cloud computing service provider, CloudHealth,...
What is the main problem with Cheryl’s suggested method of communicating the new privacy policy?
SCENARIO Please use the following to answer the next question: Cheryl is the sole owner of Fitness Coach, Inc., a medium-sized company that helps individuals realize their physical fitness goals through classes, individual instruction, and access to an extensive indoor gym. She has owned the company for ten years and...