CIPP-US 무료 덤프문제 온라인 액세스

Who is responsible for notifying consumers when adverse action is taken based on information in a consumer credit report?

• A.The User
• B.The Credit Bureau
• C.The Consumer Financial Protection Bureau
• D.The Credit Reporting Agency

Which of the following became the first state to pass a law specifically regulating the practices of data brokers?

• A.Washington.
• B.California.
• C.Vermont.
• D.New York.

Which of the following is NOT one of three broad categories of products offered by data brokers, as identified by the U.S. Federal Trade Commission (FTC)?

• A.Marketing (such as appending data to customer information that a marketing company already has).
• B.Research (such as information for understanding consumer trends).
• C.Risk mitigation (such as information that may reduce the risk of fraud).
• D.Location of individuals (such as identifying an individual from partial information).

Sarah lives in San Francisco, California. Based on a dramatic increase in unsolicited commercial emails, Sarah believes that a major social media platform with over 50 million users has collected a lot of personal information about her. The company that runs the platform is based in New York and France.
Why is Sarah entitled to ask the social media platform to delete the personal information they have collected about her?

• A.The New York "Stop Hacks and Improve Electronic Data Security" (SHIELD) Act requires that businesses under New York's jurisdiction must delete customers' personal information upon request.
• B.The California Consumer Privacy Act entitles Sarah to request deletion of her personal information.
• C.Under Section 5 of the FTC Act, the Federal Trade Commission has held that refusing to delete an individual's personal information upon request constitutes an unfair practice.
• D.Any company with a presence in Europe must comply with the General Data Protection Regulation globally, including in response to data subject deletion requests.

All the following are security requirements set forth by the HIPPA Security Rule, except:

• A.Ensure compliance by the workforce and implement a security and awareness training program.
• B.Designate a responsible person for the security program.
• C.Establish an annual compliance audit process with the Office of Civil Rights.
• D.Conduct initial and ongoing risk assessments.