nerdexam
EC-Council

312-49V11 · Question #154

After a major data breach in a financial institution, a forensic investigator is brought in to determine the source and the extent of the breach. The investigator needs to ensure compliance with the…

The correct answer is D. Gramm-Leach-Bliley Act. The Gramm-Leach-Bliley Act (GLBA) governs how financial institutions protect and share customers' non-public personal information (NPI). Suspected improper sharing with non-affiliated third parties squarely triggers GLBA privacy and safeguarding concerns.

Computer Forensics Investigation Process

Question

After a major data breach in a financial institution, a forensic investigator is brought in to determine the source and the extent of the breach. The investigator needs to ensure compliance with the legal standards in their investigations. During the investigation, they stumble upon non- public personal information of consumers stored by the institution and suspect this information was illegally shared with non-affiliated third parties. Which law/regulation should be the investigator s primary concern in this scenario?

Options

  • AHealth Insurance Portability and Accountability Act of 1996
  • BFederal Information Security Modernization Act of 2014
  • CGeneral Data Protection Regulation
  • DGramm-Leach-Bliley Act

How the community answered

(25 responses)
  • A
    4% (1)
  • B
    12% (3)
  • C
    4% (1)
  • D
    80% (20)

Explanation

The Gramm-Leach-Bliley Act (GLBA) governs how financial institutions protect and share customers' non-public personal information (NPI). Suspected improper sharing with non-affiliated third parties squarely triggers GLBA privacy and safeguarding concerns.

Topics

#Gramm-Leach-Bliley Act#financial data privacy#regulatory compliance#non-public personal information

Community Discussion

No community discussion yet for this question.

Full 312-49V11 Practice