IAPP CIPP-C Certified Information Privacy Professional/ Canada Exam Exam Practice Test Questions

• Question 1

  According to the FTC Report of 2012, what is the main goal of Privacy by Design?

  • Obtaining consumer consent when collecting sensitive data for certain purposes
  • Establishing a system of self-regulatory codes for mobile-related services
  • Incorporating privacy protections throughout the development process
  • Implementing a system of standardization for privacy notices

  Show Answer Answer: C Next

• Question 2

  Which of the following is commonly required for an entity to be subject to breach notification requirements under most state laws?

  • The entity must conduct business in the state
  • The entity must have employees in the state
  • The entity must be registered in the state
  • The entity must be an information broker

  Show Answer Answer: A Next

• Question 3

  Which of the following best describes how federal anti-discrimination laws protect the privacy of private-sector employees in the United States?

  • They prescribe working environments that are safe and comfortable.
  • They limit the amount of time a potential employee can be interviewed.
  • They promote a workforce of employees with diverse skills and interests.
  • They limit the types of information that employers can collect about employees.

  Show Answer Answer: A Next

• Question 4

  What important action should a health care provider take if the she wants to qualify for funds under the Health Information Technology for Economic and Clinical Health Act (HITECH)?

  • Make electronic health records (EHRs) part of regular care
  • Bill the majority of patients electronically for their health care
  • Send health information and appointment reminders to patients electronically
  • Keep electronic updates about the Health Insurance Portability and Accountability Act

  Show Answer Answer: A Next

• Question 5

  Sarah lives in San Francisco, California. Based on a dramatic increase in unsolicited commercial emails, Sarah believes that a major social media platform with over 50 million users has collected a lot of personal information about her. The company that runs the platform is based in New York and France. Why is Sarah entitled to ask the social media platform to delete the personal information they have collected about her?

  • Any company with a presence in Europe must comply with the General Data Protection Regulation globally, including in response to data subject deletion requests.
  • Under Section 5 of the FTC Act, the Federal Trade Commission has held that refusing to delete an individual’s personal information upon request constitutes an unfair practice.
  • The California Consumer Privacy Act entitles Sarah to request deletion of her personal information.
  • The New York “Stop Hacks and Improve Electronic Data Security” (SHIELD) Act requires that businesses under New York’s jurisdiction must delete customers’ personal information upon request.

  Show Answer Answer: C Next