Question 1

Which of the following describes the most likely risk for a company developing a privacy policy with standards that are much higher than its competitors?

Options :

A : Being more closely scrutinized for any breaches of policy

B : Getting accused of discriminatory practices

C : Attracting skepticism from auditors

D : Having a security system failure

Answer: A

Question 2

Which of the following is most likely to provide privacy protection to private-sector employees in the United States?

Options :

A : State law, contract law, and tort law

B : The Federal Trade Commission Act (FTC Act)

C : Amendments one, four, and five of the U.S. Constitution

D : The U.S. Department of Health and Human Services (HHS)

Answer: A

Question 3

What consumer protection did the Fair and Accurate Credit Transactions Act (FACTA) require?

Options :

A : The ability for the consumer to correct inaccurate credit report information

B : The truncation of account numbers on credit card receipts

C : The right to request removal from e-mail lists

D : Consumer notice when third-party data is used to make an adverse decision

Answer: A

Question 4

Mega Corp. is a U.S.-based business with employees in California, Virginia, and Colorado. Which of the following must Mega Corp. comply with in regard to its human resources data?

Options :

A : California Privacy Rights Act.

B : California Privacy Rights Act and Virginia Consumer Data Protection Act.

C : California Privacy Rights Act and Colorado Privacy Act.

D : California Privacy Rights Act, Virginia Consumer Data Protection Act, and Colorado Privacy Act.

Answer: D

Question 5

A company based in United States receives information about its UK subsidiary’s employees in connection withthe centralized HR service it provides.How can the UK company ensure an adequate level of data protection that would allow the restricted datatransfer to continue?

Options :

A : By signing up to an approved code of conduct under UK GDPR to demonstrate compliance with its requirements, both for the parent and the subsidiary companies

B : By revising the contract with the United States parent company incorporating EU SCCs, as it continues to be valid for restricted transfers under the UK regime

C : By submitting to the ICO a new application for the UK BCRs using the UK BCR application forms, as their existing authorized EU BCRs are not recognized.

D : By allowing each employee the option to opt-out to the restricted transfer, as it is necessary to send their names in order to book the sales bonuses.

Answer: B

Free CIPP-US Mock Exam – Practice Online Confidently

Buying Options: