- All Exams Instant Download
Which federal act does NOT contain provisions for preempting stricter state laws?
Which federal act does NOT contain provisions for preempting stricter state laws?A . The CAN-SPAM ActB . The Children’s Online Privacy Protection Act (COPPA)C . The Fair and Accurate Credit Transactions Act (FACTA)D . The Telemarketing Consumer Protection and Fraud Prevention ActView AnswerAnswer: D
What is the most significant reason that the U.S. Department of Health and Human Services (HHS) might impose a penalty on HealthCo?
SCENARIO Please use the following to answer the next QUESTION: You are the chief privacy officer at HealthCo, a major hospital in a large U.S. city in state A. HealthCo is a HIPAA-covered entity that provides healthcare services to more than 100,000 patients. A third-party cloud computing service provider, CloudHealth,...
If an organization maintains data classified as high sensitivity in the same system as data classified as low sensitivity, which of the following is the most likely outcome?
If an organization maintains data classified as high sensitivity in the same system as data classified as low sensitivity, which of the following is the most likely outcome?A . The organization will still be in compliance with most sector-specific privacy and security laws.B . The impact of an organizational data...
Based on the problems with the company’s privacy security that Roberta identifies, what is the most likely cause of the breach?
SCENARIO Please use the following to answer the next QUESTION When there was a data breach involving customer personal and financial information at a large retail store, the company’s directors were shocked. However, Roberta, a privacy analyst at the company and a victim of identity theft herself, was not. Prior...
What is the most likely reason that states have adopted their own data breach notification laws?
What is the most likely reason that states have adopted their own data breach notification laws?A . Many states have unique types of businesses that require specific legislationB . Many lawmakers believe that federal enforcement of current laws has not been effectiveC . Many types of organizations are not currently...
All of the following common law torts are relevant to employee privacy under US law EXCEPT?
All of the following common law torts are relevant to employee privacy under US law EXCEPT?A . Infliction of emotional distress.B . Intrusion upon seclusion.C . DefamationD . Conversion.View AnswerAnswer: B Explanation: Reference: https://en.wikipedia.org/wiki/Privacy_law
What is a key way that the Gramm-Leach-Bliley Act (GLBA) prevents unauthorized access into a person’s back account?
What is a key way that the Gramm-Leach-Bliley Act (GLBA) prevents unauthorized access into a person’s back account?A . By requiring immediate public disclosure after a suspected security breach.B . By requiring the amount of customer personal information printed on paper.C . By requiring the financial institutions limit the collection...
What is the best reason for Cheryl to follow Janice’s suggestion about classifying customer data?
SCENARIO Please use the following to answer the next QUESTION: Cheryl is the sole owner of Fitness Coach, Inc., a medium-sized company that helps individuals realize their physical fitness goals through classes, individual instruction, and access to an extensive indoor gym. She has owned the company for ten years and...
According to FERPA, when can a school disclose records without a student’s consent?
According to FERPA, when can a school disclose records without a student’s consent?A . If the disclosure is not to be conducted through email to the third partyB . If the disclosure would not reveal a student’s student identification numberC . If the disclosure is to practitioners who are involved...
What practice does the USA FREEDOM Act NOT authorize?
What practice does the USA FREEDOM Act NOT authorize?A . Emergency exceptions that allows the government to target roamersB . An increase in the maximum penalty for material support to terrorismC . An extension of the expiration for roving wiretapsD . The bulk collection of telephone data and internet metadataView...
