nerdexam
(ISC)2

CGRC · Question #316

If an organization shares financial and personal details of a client to other companies without prior consent of the individuals that organization is violating what following Internet law? Response:

The correct answer is C. Privacy law. Sharing a client's financial and personal details with other companies without their prior consent directly violates privacy laws, which govern the collection, use, and disclosure of personal information.

System Compliance

Question

If an organization shares financial and personal details of a client to other companies without prior consent of the individuals that organization is violating what following Internet law? Response:

Options

  • ASecurity law
  • BCopyright law
  • CPrivacy law
  • DTrademark law

How the community answered

(21 responses)
  • B
    5% (1)
  • C
    90% (19)
  • D
    5% (1)

Why each option

Sharing a client's financial and personal details with other companies without their prior consent directly violates privacy laws, which govern the collection, use, and disclosure of personal information.

ASecurity law

Security law generally refers to laws related to protecting information systems and data from unauthorized access or breaches, not specifically the unauthorized sharing of legally obtained data.

BCopyright law

Copyright law protects original works of authorship, such as literary or artistic creations, not personal data.

CPrivacy lawCorrect

Sharing financial and personal details (Personal Identifiable Information - PII) without explicit consent is a direct violation of privacy laws. These laws, such as GDPR or various state-specific privacy acts, are designed to protect individuals' control over their personal data and mandate consent for data sharing.

DTrademark law

Trademark law protects brand names, logos, and symbols used in commerce, not individuals' personal data.

Concept tested: Data privacy law principles

Source: https://www.ftc.gov/business-guidance/privacy-security/protecting-personal-information

Topics

#Data Privacy#Consent#Legal Compliance#Information Sharing

Community Discussion

No community discussion yet for this question.

Full CGRC Practice