CIPP-US practice questions 231–236

1. Question 231 · 236 in bank

   A company wants to use an algorithm to screen job applications by assigning suitability scores, automatically sending rejection letters if the score is below a specified threshold. What would the company have to include in their plans, in order to comply with the requirements found in both Virginia's and Colorado's privacy laws?

   • AA notification to the state authority
   • BA third-party algorithm validation
   • CA human oversight component
   • DA formal risk assessment

   Show answer

   Answer: D

   Next question

2. Question 232 · 236 in bank

   A mail order company wishing to target consumers in California, Virginia and Colorado would find that all three states do what in their respective privacy laws?

   • ARequire businesses to honor universal opt-out mechanisms
   • BOffer similar consent mechanisms for the processing of sensitive data
   • CGrant consumers a private right of action in the event of a data breach
   • DProtect consumers' right to correct inaccuracies in their personal information

   Show answer

   Answer: D

   Next question

3. Question 233 · 236 in bank

   Select 3

   MULTI-SELECT - Please select 3 of the 6 options below. No partial credit will be given. California's Delete Act (SB 362) requires data brokers to perform which of the following actions? (Choose three.)

   • ARegister the company with the California Privacy Protection Agency (CPPA)
   • BComplete and document annual training for all employees regarding individuals’ data deletion rights
   • CMaintain an internal audit function to oversee compliance with data subject deletion requirements
   • DReport to the regulatory authorities metrics regarding privacy requests received
   • EInclude at least the past three years of data when completing data subject deletion requests
   • FSupport a new mechanism to honor deletion requests from data subjects

   Show answer

   Answer: ADF

   Next question

4. Question 234 · 236 in bank

   Which of the following is NOT explicitly required by Virginia’s Consumer Data Protection Act or Colorado’s Privacy Act to be in a privacy notice?

   • ACategories of personal data collected
   • BConsumer rights descriptions
   • CCategories of third parties
   • DSources of personal data

   Show answer

   Answer: D

   Next question

5. Question 235 · 236 in bank

   Prior to the California Privacy Rights Act (CPRA), California residents were not given any legal right under the CCPA to request that organizations do what?

   • ADelete their personal information
   • BCorrect their personal information
   • CDisclose their personal information to them
   • DRefrain from selling their personal information to third parties

   Show answer

   Answer: B

   Next question

6. Question 236 · 236 in bank

   The California Privacy Rights Act (CPRA) expands upon the consumer rights previously introduced in the California Consumer Privacy Act (CCPA). Which of the following consumer rights was already a part of the CCPA?

   • ARight to delete personal information
   • BRight to limit use of sensitive personal information
   • CRight to seek damages for unmet data portability request
   • DRight to opt out of sharing personal information for cross-context behavioral advertising

   Show answer

   Answer: A

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIPP-US practice, question 231. 236 questions available.