nerdexam
GIAC

GCFA · Question #215

A Web-based credit card company had collected financial and personal details of Mark before issuing him a credit card. The company has now provided Mark's financial and personal details to another…

The correct answer is B. Privacy law. Sharing a customer's personal and financial data with a third party without consent violates privacy law, which governs how organizations collect, store, and distribute personal information.

Advanced Incident Response & Digital Forensics Fundamentals

Question

A Web-based credit card company had collected financial and personal details of Mark before issuing him a credit card. The company has now provided Mark's financial and personal details to another company. Which of the following Internet laws has the credit card issuing company violated?

Options

  • ASecurity law
  • BPrivacy law
  • CCopyright law
  • DTrademark law

How the community answered

(53 responses)
  • A
    11% (6)
  • B
    79% (42)
  • C
    4% (2)
  • D
    6% (3)

Why each option

Sharing a customer's personal and financial data with a third party without consent violates privacy law, which governs how organizations collect, store, and distribute personal information.

ASecurity law

Security law addresses protections against unauthorized access to systems and data, not the unauthorized sharing of legitimately collected data with third parties.

BPrivacy lawCorrect

Privacy laws such as GDPR, CCPA, and similar regulations prohibit organizations from disclosing personally identifiable information or financial data to third parties without explicit user consent or a lawful basis. The credit card company collected this data solely for the purpose of issuing a credit card, and sharing it outside that purpose constitutes an unauthorized disclosure in violation of privacy law.

CCopyright law

Copyright law protects original creative works such as software, literature, and art from unauthorized reproduction, and does not govern personal data sharing.

DTrademark law

Trademark law protects brands, logos, and trade names from unauthorized use, and is unrelated to the disclosure of personal or financial information.

Concept tested: Privacy law and unauthorized third-party data disclosure

Source: https://gdpr.eu/what-is-gdpr/

Topics

#privacy law#data sharing#personal information#legal compliance

Community Discussion

No community discussion yet for this question.

Full GCFA Practice