CIPP-US Exam Questions

What is the primary purpose of the HIPAA Security Rule?

All the following are security requirements set forth by the HIPPA Security Rule, except:

Which action is prohibited under the Electronic Communications Privacy Act of 1986?

Which of the following does Title VII of the Civil Rights Act prohibit an employer from asking a job applicant?

How did the Fair and Accurate Credit Transactions Act (FACTA) amend the Fair Credit Reporting Act (FCRA)?

Which federal act does NOT contain provisions for preempting stricter state laws?

Which of the following is commonly required for an entity to be subject to breach notification requirements under most state laws?

What is the most likely reason that states have adopted their own data breach notification laws?

Which federal law or regulation preempts state law?

More than half of U.S. states require telemarketers to?

What does the Massachusetts Personal Information Security Regulation require as it relates to encryption of personal information?

California's SB 1386 was the first law of its type in the United States to do what?

Which of the following is not a legal requirement when a potential employer is using information in a consumer report to determine employment eligibility?

Under Section 702 of FISA, which surveillance program allows data requests of Internet Service Providers?

In which of the following laws is disclosure forbidden unless a person has expressly opted-in?

Based on current US employment privacy laws, which of the following should NOT be expected to happen while employed with a company?

"Third party doctrine" as it relates to the fourth amendment of the US constitution concerns:

Which legislation provides protection to the media from government searches unless they have committed a crime or threaten to commit a crime?

In which situation is a company operating under the assumption of implied consent?

All of the following are tasks in the "Discover" phase of building an information management program EXCEPT?

Which of the following describes the most likely risk for a company developing a privacy policy with standards that are much higher than its competitors?

If an organization certified under Privacy Shield wants to transfer personal data to a third party acting as an agent, the organization must ensure the third party does all of the...

What was the original purpose of the Federal Trade Commission Act?

SCENARIO Please use the following to answer the next question: Matt went into his son's bedroom one evening and found him stretched out on his bed typing on his laptop. "Doing your...

SCENARIO Please use the following to answer the next question: Matt went into his son's bedroom one evening and found him stretched out on his bed typing on his laptop. "Doing your...