nerdexam
(ISC)2

CGRC · Question #197

A Web-based credit card company had collected financial and personal details of Mark before issuing him a credit card. The company has now provided Mark's financial and personal details to another…

The correct answer is B. Privacy law. The credit card company violated privacy law by sharing Mark's personal and financial details without authorization, which is a breach of privacy principles and regulations.

System Compliance

Question

A Web-based credit card company had collected financial and personal details of Mark before issuing him a credit card. The company has now provided Mark's financial and personal details to another company. Which of the following Internet laws has the credit card issuing company violated? Response:

Options

  • ASecurity law
  • BPrivacy law
  • CCopyright law
  • DTrademark law

How the community answered

(41 responses)
  • A
    5% (2)
  • B
    85% (35)
  • C
    2% (1)
  • D
    7% (3)

Why each option

The credit card company violated privacy law by sharing Mark's personal and financial details without authorization, which is a breach of privacy principles and regulations.

ASecurity law

Security law typically deals with the measures taken to protect data from unauthorized access or breaches, not the authorized sharing of data that violates privacy principles.

BPrivacy lawCorrect

Privacy laws, such as GDPR or various state-specific consumer privacy acts, govern how personal data is collected, stored, processed, and shared. Providing a customer's financial and personal details to another company without explicit consent or a lawful basis is a direct violation of these laws, which aim to protect individuals' rights over their personal information.

CCopyright law

Copyright law protects original works of authorship, such as software code or artistic creations, not personal data.

DTrademark law

Trademark law protects brand names, logos, and symbols used to identify goods or services, not the personal information of individuals.

Concept tested: Data privacy laws and regulations

Source: https://www.ftc.gov/business-guidance/privacy-security/privacy-initiatives

Topics

#Data Privacy#Personal Data Sharing#Privacy Law Violation#Legal Compliance

Community Discussion

No community discussion yet for this question.

Full CGRC Practice