CIPP/US Exam UPDATED Exam Questions
and CORRECT Answers
ADA - CORRECT ANSWER - Americans with Disabilities Act (ADA)
Antidiscrimination Laws - CORRECT ANSWER - US federal laws that prohibit
discrimination in employment and have sometimes been used to limit background checks.
Background Screening - CORRECT ANSWER - Pre-employment review of criminal,
commercial and financial records of an individual or org, regulated by federal and state laws.
Bring Your Own Device (BYOD) - CORRECT ANSWER - Strategy allowing employees
to use their personal computing devices for work purposes. Benefits include more flexibility,
efficiency and productivity in employee work schedules; challenges are primarily security-based
as employers lack control over employee devices.
CFPB - CORRECT ANSWER - Consumer Financial Protection Bureau
Common Law - CORRECT ANSWER - Legal principles that have devleoped over time in
judicial decisions (case law), often drawing on social customs and expectations
Consent Decree - CORRECT ANSWER - Judgement entered by consent of the parties (a
federal or state agency and an adverse party) whereby the defendant agrees to stop alleged illegal
activity, typically without admitting guilt or wrongdoing.
CRA - CORRECT ANSWER - Consumer Reporting Agency
Consumer Reporting Agency (CRA) - CORRECT ANSWER - Person / entity that
compiles or evaluates personal information for the purpose of furnishing consumer reports to
third parties for a fee.
,Defamation - CORRECT ANSWER - Any act or communication intending to harm the
reputation of another as to lower him in the estimation of the community or to deter third persons
from associating or dealing with him.
e-Discovery - CORRECT ANSWER - Discovery in civil litigation dealing the exchange of
info in electronic format, often requiring digital forensics analysis.
EEOC - CORRECT ANSWER - Equal Employment Opportunity Commission
Equal Employment Opportunity Commission - CORRECT ANSWER - Federal Agency
overseeing many laws preventing discrimination in the workplace, including Title VII of the
Civil Rights Act, ADEA and Titles I and V of the ADA
Evidentiary Privilege - CORRECT ANSWER - Privileges limiting or prohibiting
disclosure of personal information in the context of investigations and litigation, such as
attorney-client privilege.
ESI - CORRECT ANSWER - Electronically stored Information (i.e. e-mail, word-
processing docs, server logs, IM, transcripts, voicemail, social networking, thumb drives, or data
on SD cards.
Employment at Will - CORRECT ANSWER - General rule in the US which grants the
employer broad discretion to fire an employee.
FCRA - CORRECT ANSWER - Fair Credit Reporting Act
Fair Credit Reporting Act - CORRECT ANSWER - 1970 to regulate consumer reporting
industry and provide privacy rights to consumer reports.
What does FCRA mandate? - CORRECT ANSWER - Accurate and relevant data
collection, consumer ability to access and correct their info, limited use of consumer reports for
intended purpose.
, FTC - CORRECT ANSWER - Federal Trade Commission
Federal Trade Commission - CORRECT ANSWER - Independent consumer protection
agency governed by a chairman and four other commissioners with authority to enforce against
unfair and deceptive trade practices.
GLBA - CORRECT ANSWER - Gramm-Leach Bliley Act
GPEN - CORRECT ANSWER - Global Privacy Enforcement Network
Global Privacy Enforcement Network - CORRECT ANSWER - Est. 2010 by FTC and
enforcement authorities around the world. Promotes cross-border info sharing as well as
investigation and enforcement cooperation among privacy authorities globally.
Gramm-Leach Bliley Act - CORRECT ANSWER - AKA Financial Services
Modernization Act of 1999. US Federal law controlling way that financial institutions deal with
private information of individuals.
Health Information - CORRECT ANSWER - Any info related to past, present or future
physical / mental condition, provision of health care or payment for health care for an individual.
HIPAA - CORRECT ANSWER - Health Insurance Portability and Accountability Act of
1996
Health Insurance Portability and Accountability Act of 1996 - CORRECT ANSWER - US
law passed to create national standards for electronic healthcare transactions, and other things.
Required US Department of Health and Human Services (DHHS) to create regs to protect
personal health information.
and CORRECT Answers
ADA - CORRECT ANSWER - Americans with Disabilities Act (ADA)
Antidiscrimination Laws - CORRECT ANSWER - US federal laws that prohibit
discrimination in employment and have sometimes been used to limit background checks.
Background Screening - CORRECT ANSWER - Pre-employment review of criminal,
commercial and financial records of an individual or org, regulated by federal and state laws.
Bring Your Own Device (BYOD) - CORRECT ANSWER - Strategy allowing employees
to use their personal computing devices for work purposes. Benefits include more flexibility,
efficiency and productivity in employee work schedules; challenges are primarily security-based
as employers lack control over employee devices.
CFPB - CORRECT ANSWER - Consumer Financial Protection Bureau
Common Law - CORRECT ANSWER - Legal principles that have devleoped over time in
judicial decisions (case law), often drawing on social customs and expectations
Consent Decree - CORRECT ANSWER - Judgement entered by consent of the parties (a
federal or state agency and an adverse party) whereby the defendant agrees to stop alleged illegal
activity, typically without admitting guilt or wrongdoing.
CRA - CORRECT ANSWER - Consumer Reporting Agency
Consumer Reporting Agency (CRA) - CORRECT ANSWER - Person / entity that
compiles or evaluates personal information for the purpose of furnishing consumer reports to
third parties for a fee.
,Defamation - CORRECT ANSWER - Any act or communication intending to harm the
reputation of another as to lower him in the estimation of the community or to deter third persons
from associating or dealing with him.
e-Discovery - CORRECT ANSWER - Discovery in civil litigation dealing the exchange of
info in electronic format, often requiring digital forensics analysis.
EEOC - CORRECT ANSWER - Equal Employment Opportunity Commission
Equal Employment Opportunity Commission - CORRECT ANSWER - Federal Agency
overseeing many laws preventing discrimination in the workplace, including Title VII of the
Civil Rights Act, ADEA and Titles I and V of the ADA
Evidentiary Privilege - CORRECT ANSWER - Privileges limiting or prohibiting
disclosure of personal information in the context of investigations and litigation, such as
attorney-client privilege.
ESI - CORRECT ANSWER - Electronically stored Information (i.e. e-mail, word-
processing docs, server logs, IM, transcripts, voicemail, social networking, thumb drives, or data
on SD cards.
Employment at Will - CORRECT ANSWER - General rule in the US which grants the
employer broad discretion to fire an employee.
FCRA - CORRECT ANSWER - Fair Credit Reporting Act
Fair Credit Reporting Act - CORRECT ANSWER - 1970 to regulate consumer reporting
industry and provide privacy rights to consumer reports.
What does FCRA mandate? - CORRECT ANSWER - Accurate and relevant data
collection, consumer ability to access and correct their info, limited use of consumer reports for
intended purpose.
, FTC - CORRECT ANSWER - Federal Trade Commission
Federal Trade Commission - CORRECT ANSWER - Independent consumer protection
agency governed by a chairman and four other commissioners with authority to enforce against
unfair and deceptive trade practices.
GLBA - CORRECT ANSWER - Gramm-Leach Bliley Act
GPEN - CORRECT ANSWER - Global Privacy Enforcement Network
Global Privacy Enforcement Network - CORRECT ANSWER - Est. 2010 by FTC and
enforcement authorities around the world. Promotes cross-border info sharing as well as
investigation and enforcement cooperation among privacy authorities globally.
Gramm-Leach Bliley Act - CORRECT ANSWER - AKA Financial Services
Modernization Act of 1999. US Federal law controlling way that financial institutions deal with
private information of individuals.
Health Information - CORRECT ANSWER - Any info related to past, present or future
physical / mental condition, provision of health care or payment for health care for an individual.
HIPAA - CORRECT ANSWER - Health Insurance Portability and Accountability Act of
1996
Health Insurance Portability and Accountability Act of 1996 - CORRECT ANSWER - US
law passed to create national standards for electronic healthcare transactions, and other things.
Required US Department of Health and Human Services (DHHS) to create regs to protect
personal health information.
