- All Exams Instant Download
In what way does the “Red Flags Rule” under the Fair and Accurate Credit Transactions Act (FACTA) relate to the owner of a grocery store who uses a money wire service?
In what way does the “Red Flags Rule” under the Fair and Accurate Credit Transactions Act (FACTA) relate to the owner of a grocery store who uses a money wire service?A . It mandates the use of updated technology for securing credit recordsB . It requires the owner to implement...
All of the following are tasks in the “Discover” phase of building an information management program EXCEPT?
All of the following are tasks in the “Discover” phase of building an information management program EXCEPT?A . Facilitating participation across departments and levelsB . Developing a process for review and update of privacy policiesC . Deciding how aggressive to be in the use of personal informationD . Understanding the...
At this stage of the investigation, what should the data privacy leader review first?
SCENARIO Please use the following to answer the next question: A US-based startup company is selling a new gaming application. One day, the CEO of the company receives an urgent letter from a prominent EU-based retail partner. Triggered by an unresolved complaint lodged by an EU resident, the letter describes...
How does this benefit both parties involved?
The FTC often negotiates consent decrees with companies found to be in violation of privacy principles. How does this benefit both parties involved?A . It standardizes the amount of fines.B . It simplifies the audit requirements.C . It avoids potentially harmful publicity.D . It spares the expense of going to...
The rules for “e-discovery” mainly prevent which of the following?
The rules for “e-discovery” mainly prevent which of the following?A . A conflict between business practice and technological safeguardsB . The loss of information due to poor data retention practicesC . The practice of employees using personal devices for workD . A breach of an organization’s data retention programView AnswerAnswer:...
In which situation would a policy of “no consumer choice” or “no option” be expected?
In which situation would a policy of “no consumer choice” or “no option” be expected?A . When a job applicant’s credit report is provided to an employerB . When a customer’s financial information is requested by the governmentC . When a patient’s health record is made available to a pharmaceutical...
Which of the following federal agencies does NOT enforce the Disposal Rule under the Fair and Accurate Credit Transactions Act (FACTA)?
Which of the following federal agencies does NOT enforce the Disposal Rule under the Fair and Accurate Credit Transactions Act (FACTA)?A . The Office of the Comptroller of the CurrencyB . The Consumer Financial Protection BureauC . The Department of Health and Human ServicesD . The Federal Trade CommissionView AnswerAnswer:...
Which of the following laws is NOT involved in the regulation of employee background checks?
Which of the following laws is NOT involved in the regulation of employee background checks?A . The Civil Rights Act.B . The Gramm-Leach-Bliley Act (GLBA).C . TheE . Fair Credit Reporting Act (FCRA).F . The California Investigative Consumer Reporting Agencies Act (ICRAA).View AnswerAnswer: B
Which federal act does NOT contain provisions for preempting stricter state laws?
Which federal act does NOT contain provisions for preempting stricter state laws?A . The CAN-SPAM ActB . The Children’s Online Privacy Protection Act (COPPA)C . The Fair and Accurate Credit Transactions Act (FACTA)D . The Telemarketing Consumer Protection and Fraud Prevention ActView AnswerAnswer: D
What is the most significant reason that the U.S. Department of Health and Human Services (HHS) might impose a penalty on HealthCo?
SCENARIO Please use the following to answer the next QUESTION: You are the chief privacy officer at HealthCo, a major hospital in a large U.S. city in state A. HealthCo is a HIPAA-covered entity that provides healthcare services to more than 100,000 patients. A third-party cloud computing service provider, CloudHealth,...
