Which of the following statements is most accurate in regard to data breach notifications under federal and state laws:

Question

Options

• AYou must notify the Federal Trade Commission (FTC) in addition to affected individuals if over
• BWhen providing an individual with required notice of a data breach, you must identify what
• CWhen you are required to provide an individual with notice of a data breach under any state's law,
• DThe only obligations to provide data breach notification are under state law because currently

• A
  4% (2)
• B
  13% (7)
• C
  5% (3)
• D
  79% (44)

Explanation

Data breach notification laws in the United States vary by state and territory, and there is no comprehensive federal law that applies to all types of personal information. Some federal laws, such as HIPAA, GLBA, and the FDIC rule, impose data breach notification requirements for specific industries or sectors, but they do not cover all types of personal information or all entities that collect, store, or process such information. Therefore, the only obligations to provide data breach notification for the breach of personal information are under state law, unless a specific federal law applies to the entity or the information involved.

No community discussion yet for this question.