nerdexam
IAPP

CIPP-US · Question #153

Which of the following data elements is most likely to be subject to comprehensive state data security and privacy laws?

The correct answer is A. Account holders' social security numbers, maintained by a bank.. Social security numbers (SSNs) are one of the most sensitive types of personally identifiable information (PII) and are subject to comprehensive data security and privacy laws at both the federal and state levels. Banks, as financial institutions, are subject to strict regulation

State Privacy Laws

Question

Which of the following data elements is most likely to be subject to comprehensive state data security and privacy laws?

Options

  • AAccount holders' social security numbers, maintained by a bank.
  • BUsers' sexual orientations, maintained by a social media website
  • CIndividual drivers' license numbers, maintained by a state agency.
  • DContact details of individuals who report emergencies, maintained by local authorities

How the community answered

(25 responses)
  • A
    84% (21)
  • B
    8% (2)
  • C
    4% (1)
  • D
    4% (1)

Explanation

Social security numbers (SSNs) are one of the most sensitive types of personally identifiable information (PII) and are subject to comprehensive data security and privacy laws at both the federal and state levels. Banks, as financial institutions, are subject to strict regulations under laws like the Gramm-Leach-Bliley Act (GLBA) and state privacy laws regarding the safeguarding of sensitive data like SSNs. Why Social Security Numbers are Most Likely to Be Covered: SSNs are a high-value target for identity theft, making their protection a focus of numerous privacy and data security laws. Federal laws like GLBA and the Fair Credit Reporting Act (FCRA) impose strict data security requirements on financial institutions. State laws, such as those in California, often require businesses to protect SSNs and notify individuals in the event of a breach involving sensitive information.

Topics

#state data security laws#SSN protection#financial data#covered data elements

Community Discussion

No community discussion yet for this question.

Full CIPP-US Practice