CIPP-US practice questions 161–170

1. Question 161 · 236 in bank

   Which of the following would NOT be considered a method of obtaining verifiable parental consent before collecting, using or disclosing personal information from children under the Children’s Online Privacy Protection Act (COPPA) of 1998?

   • AUsing a credit card, debit card, or other online payment system.
   • BHaving the parent call a toll-free telephone number staffed by trained personnel.
   • CHaving the parent sign a consent form and return it to the operator by postal mail, facsimile, or electronic scan.
   • DSending a text message to the parent explaining the intended uses of the information.

   Show answer

   Answer: D

   Next question

2. Question 162 · 236 in bank

   Edward Snowden’s revelations regarding government programs collecting massive amounts of information about U.S. citizens and noncitizens led to the passage of which law?

   • ACybersecurity Information Sharing Act of 2015
   • BForeign Intelligence Surveillance Act
   • CUSA FREEDOM Act
   • DCLOUD Act

   Show answer

   Answer: C

   Next question

3. Question 163 · 236 in bank

   In 2011, the FTC announced a settlement with Google regarding its social networking service Google Buzz. The FTC alleged that in the process of launching the service, the company did all of the following EXCEPT?

   • AViolated its own privacy policies.
   • BEngaged in deceptive trade practices.
   • CFailed to comply with Safe Harbor principles.
   • DFailed to employ sufficient security safeguards.

   Show answer

   Answer: D

   Next question

4. Question 164 · 236 in bank

   Which of the following is a U.S. surveillance program authorized under Section 702 of the Foreign Intelligence Surveillance Act Amendments Act?

   • AUpstream
   • BNATGRID
   • CProject 6
   • DSORM

   Show answer

   Answer: A

   Next question

5. Question 165 · 236 in bank

   Which of the following federal agencies does NOT have regulatory authority related to privacy?

   • AConsumer Financial Protection Bureau.
   • BU.S. Department of Transportation.
   • CU.S. Department of Commerce.
   • DFederal Reserve

   Show answer

   Answer: C

   Next question

6. Question 166 · 236 in bank

   ABC Corp. is a consumer-facing business that uses a number of vendors to help operate its business, such as payment processors, cloud service providers, and an e-commerce platform. If ABC Corp. were subject to the California Consumer Privacy Act (CCPA), what would it have to do in order to avoid having its transfer of personal information to vendors be considered a "sale" of personal information?

   • ARegister its transfer of personal information with the California Attorney General's office.
   • BEnsure that it does not receive any monetary consideration from the vendors for the personal information.
   • CEnter into a contract with the vendors containing restrictions on what they can do with the personal information.
   • DState in its privacy policy that it will only transfer the personal information to vendors who provide the business with certain services.

   Show answer

   Answer: C

   Next question

7. Question 167 · 236 in bank

   In a data sharing arrangement, which of the following organizations would determine the rules that apply to the processing of the data being shared?

   • AThe business associate.
   • BThe hosting provider.
   • CThe data processor.
   • DThe data controller.

   Show answer

   Answer: D

   Next question

8. Question 168 · 236 in bank

   Your company's most brilliant engineer develops a new Artificial Intelligence (AI) technology he calls OXO-2576. The engineer wants to begin using it to analyze all of the data your company collects about its customers. As the company's privacy professional, you have some privacy concerns about using AI technology with customer data. Which of the following is the best recommendation to offer the company?

   • ADo not publicize that the company is using AI technology with its customer data.
   • BDe-identify the data collected by the AI technology so it cannot be linked to any individuals.
   • CAutomate the AI technology so there is no human seeing or handling the customers' personal information.
   • DUse the AI technology only for employees, as companies are given more leeway when handling employee personal information.

   Show answer

   Answer: B

   Next question

9. Question 169 · 236 in bank

   Which of the following would best provide a sufficient consumer disclosure under the Fair Credit Reporting Act (FCRA) prior to a consumer report being obtained for employment purposes?

   • AA standalone notice document.
   • BA notice provision in a mailed offer letter.
   • CA notice provision in an electronic employment application.
   • DA verbal notice provided with a conditional offer of employment.

   Show answer

   Answer: A

   Next question

10. Question 170 · 236 in bank

    Which of the following state laws has an entity exemption for organizations subject to the Gramm-Leach-Bliley Act (GLBA)?

    • ANevada Privacy Law.
    • BCalifornia Privacy Rights Act.
    • CCalifornia Consumer Privacy Act.
    • DVirginia Consumer Data Protection Act

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIPP-US practice, question 161. 236 questions available.