nerdexam
IAPP

CIPP-US · Question #145

SCENARIO Please use the following to answer the next question: Jane is a U.S. citizen and a senior software engineer at California-based Jones Labs, a major software supplier to the U.S. Department of

The correct answer is C. The applicable state law such as Illinois BIPA. When storing biometric data, such as fingerprints, organizations in the U.S. must comply with state- specific biometric privacy laws if they operate in states that regulate biometric information. The most prominent of these laws is the Illinois Biometric Information Privacy Act (

Workplace Privacy

Question

SCENARIO Please use the following to answer the next question:

Jane is a U.S. citizen and a senior software engineer at California-based Jones Labs, a major software supplier to the U.S. Department of Defense and other U.S. federal agencies Jane's manager, Patrick, is a French citizen who has been living in California for over a decade. Patrick has recently begun to suspect that Jane is an insider secretly transmitting trade secrets to foreign intelligence. Unbeknownst to Patrick, the FBI has already received a hint from anonymous whistleblower, and jointly with the National Secunty Agency is investigating Jane's possible implication in a sophisticated foreign espionage campaign. Ever since the pandemic. Jane has been working from home. To complete her daily tasks she uses her corporate laptop, which after each togin conspicuously provides notice that the equipment belongs to Jones Labs and may be monitored according to the enacted privacy policy and employment handbook Jane also has a corporate mobile phone that she uses strictly for business, the terms of which are defined in her employment contract and elaborated upon in her employee handbook. Both the privacy policy and the employee handbook are revised annually by a reputable California law firm specializing in privacy law. Jane also has a personal iPhone that she uses for private purposes only. Jones Labs has its primary data center in San Francisco, which is managed internally by Jones Labs engineers The secondary data center, managed by Amazon AWS. is physically located in the UK for disaster recovery purposes. Jones Labs' mobile devices backup is managed by a mid- sized mobile delense company located in Denver, which physically stores the data in Canada to reduce costs. Jones Labs MS Office documents are securely stored in a Microsoft Office 365 data. When storing Jane's fingerprint for remote authentication. Jones Labs should consider legality issues under which of the following9

Options

  • AThe Privacy Rule of the HITECH Act.
  • BThe California loT Security Law (SB 327).
  • CThe applicable state law such as Illinois BIPA
  • DThe federal Genetic Information Nondiscrimination Act (GINA).

How the community answered

(46 responses)
  • A
    2% (1)
  • B
    13% (6)
  • C
    78% (36)
  • D
    7% (3)

Explanation

When storing biometric data, such as fingerprints, organizations in the U.S. must comply with state- specific biometric privacy laws if they operate in states that regulate biometric information. The most prominent of these laws is the Illinois Biometric Information Privacy Act (BIPA), but similar laws also exist or are developing in other states, such as Texas and Washington. Key Considerations for Storing Biometric Data: Illinois Biometric Information Privacy Act (BIPA): BIPA (740 ILCS 14) is a leading and highly influential state law regulating the collection, storage, and use of biometric information. It requires organizations to: Obtain informed, written consent before collecting biometric data. Establish a publicly available policy governing the retention and destruction of biometric data. Use a reasonable standard of care to protect biometric data from unauthorized access or use. Prohibit the sale or transfer of biometric data without consent. California and Biometric Data: While California's California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide general protections for personal information, including biometric data, they do not have the specific consent and handling requirements that BIPA does. Nevertheless, California residents have rights related to access, deletion, and the sale of biometric information.

Topics

#biometric data#Illinois BIPA#workplace surveillance#state biometric laws

Community Discussion

No community discussion yet for this question.

Full CIPP-US Practice