CIPP/US EXAM QUESTIONS WITH 100%
CORRECT ANSWERS L LATEST
VERSION 2025/2026.
Access - ANS The ability to view personal information held by an organization. This may be
supplemented by allowing updates or corrections to the information. U.S. laws often provide for
access and correction when the information is used for any type of substantive decision making,
such as for credit reports.
Americans with Disabilities Act (ADA) - ANS Bars discrimination against qualified individuals
with disabilities; places restrictions on pre-employment medical screening.
Consumer Financial Protection Bureau (CFPB) - ANS Has enforcement power for unfair,
deceptive or abusive acts and practices for financial institutions.
Choice - ANS The ability to specify whether personal information will be collected and/or
how it will be used or disclosed. Choice can be express or implied.
Common Law - ANS Legal principles that have developed over time in judicial decisions (case
law), often drawing on social customs and expectations.
1 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
,Consent Decree - ANS A judgment entered by consent of the parties (a federal or state
agency and an adverse party) whereby the defendant agrees to stop alleged illegal activity,
typically without admitting guilt or wrongdoing.
Consumer Reporting Agency (CRA) - ANS Any person or entity that complies or evaluates
personal information for the purpose of furnishing consumer reports to third parties for a fee.
Data Breach - ANS The intentional or unintentional release of secure information to an
untrusted environment.
Data Classification - ANS Defines the clearance of individuals who can access or handle a
given set of data, as well as the baseline level of protection that is appropriate for that data.
Deceptive Trade Practices - ANS Along with unfair trade practices, behavior of an organization
that can be enforced against by the FTC.
Defamation - ANS Any act or communication intending to harm the reputation of another as
to lower him in the estimation of the community or to deter third persons from associating or
dealing with him.
Electronic Discovery (e-discovery) - ANS Discovery in civil litigation dealing with the exchange
of information in electronic format, often requiring digital forensics analysis.
Electronically Stored Information (ESI) - ANS A category of information that can include e-
mail, word-processing documents, server logs, instant messaging transcripts, voicemail systems,
social networking records, thumb drives, or data on SD cards.
Equal Employment Opportunity Commission (EEOC) - ANS A federal agency overseeing many
laws preventing discrimination in the workplace, include Title VII of the Civil Rights Act, the Age
2 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
, Discrimination in Employment Act of 1967 (ADEA) and Titles I and V of the Americans with
Disabilities Act of 1990 (ADA).
Evidentiary Privilege - ANS Privileges limiting or prohibiting disclosure of personal
information in the context of investigations and litigation, such as attorney-client privilege.
Fair Credit Reporting Act (FCRA) - ANS Enacted in 1970 to regulate the consumer reporting
industry and provide privacy rights in consumer reports, FCRA mandates accurate and relevant
data collection, provides consumers with the ability to access and correct their information, and
limits the use of consumer reports to defined permissible purposes.
Federal Trade Commission (FTC) - ANS An independent consumer protection agency
governed by a chairman and four other commissioners with the authority to enforce against
unfair and deceptive trade practices.
Global Privacy Enforcement Network (GPEN) - ANS Established in 2010 by the FTC and
enforcement authorities from around the world, the GPEN aims to promote cross-border
information sharing as well as investigation and enforcement cooperation among privacy
authorities around the world.
Gramm-Leach Bliley Act (GLBA) - ANS Alo known as the Financial Services Modernization Act
of 1999, GLBA is a United States federal law to control the ways that financial institutions deal
with the private information of individuals.
Health Information - ANS Any information related to the past, present or future physical or
mental condition, provision of health care or payment for health care for a specific individual.
Health Insurance Portability and Accountability Act of 1996 (HIPAA) - ANS A U.S. law passed
to create national standards for electronic healthcare transactions, among other purposes.
HIPAA required the U.S. Department of Health and Human Services to promulgate regulations
to protect the privacy and security of personal health information. The basic rule is that patients
3 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
CORRECT ANSWERS L LATEST
VERSION 2025/2026.
Access - ANS The ability to view personal information held by an organization. This may be
supplemented by allowing updates or corrections to the information. U.S. laws often provide for
access and correction when the information is used for any type of substantive decision making,
such as for credit reports.
Americans with Disabilities Act (ADA) - ANS Bars discrimination against qualified individuals
with disabilities; places restrictions on pre-employment medical screening.
Consumer Financial Protection Bureau (CFPB) - ANS Has enforcement power for unfair,
deceptive or abusive acts and practices for financial institutions.
Choice - ANS The ability to specify whether personal information will be collected and/or
how it will be used or disclosed. Choice can be express or implied.
Common Law - ANS Legal principles that have developed over time in judicial decisions (case
law), often drawing on social customs and expectations.
1 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
,Consent Decree - ANS A judgment entered by consent of the parties (a federal or state
agency and an adverse party) whereby the defendant agrees to stop alleged illegal activity,
typically without admitting guilt or wrongdoing.
Consumer Reporting Agency (CRA) - ANS Any person or entity that complies or evaluates
personal information for the purpose of furnishing consumer reports to third parties for a fee.
Data Breach - ANS The intentional or unintentional release of secure information to an
untrusted environment.
Data Classification - ANS Defines the clearance of individuals who can access or handle a
given set of data, as well as the baseline level of protection that is appropriate for that data.
Deceptive Trade Practices - ANS Along with unfair trade practices, behavior of an organization
that can be enforced against by the FTC.
Defamation - ANS Any act or communication intending to harm the reputation of another as
to lower him in the estimation of the community or to deter third persons from associating or
dealing with him.
Electronic Discovery (e-discovery) - ANS Discovery in civil litigation dealing with the exchange
of information in electronic format, often requiring digital forensics analysis.
Electronically Stored Information (ESI) - ANS A category of information that can include e-
mail, word-processing documents, server logs, instant messaging transcripts, voicemail systems,
social networking records, thumb drives, or data on SD cards.
Equal Employment Opportunity Commission (EEOC) - ANS A federal agency overseeing many
laws preventing discrimination in the workplace, include Title VII of the Civil Rights Act, the Age
2 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
, Discrimination in Employment Act of 1967 (ADEA) and Titles I and V of the Americans with
Disabilities Act of 1990 (ADA).
Evidentiary Privilege - ANS Privileges limiting or prohibiting disclosure of personal
information in the context of investigations and litigation, such as attorney-client privilege.
Fair Credit Reporting Act (FCRA) - ANS Enacted in 1970 to regulate the consumer reporting
industry and provide privacy rights in consumer reports, FCRA mandates accurate and relevant
data collection, provides consumers with the ability to access and correct their information, and
limits the use of consumer reports to defined permissible purposes.
Federal Trade Commission (FTC) - ANS An independent consumer protection agency
governed by a chairman and four other commissioners with the authority to enforce against
unfair and deceptive trade practices.
Global Privacy Enforcement Network (GPEN) - ANS Established in 2010 by the FTC and
enforcement authorities from around the world, the GPEN aims to promote cross-border
information sharing as well as investigation and enforcement cooperation among privacy
authorities around the world.
Gramm-Leach Bliley Act (GLBA) - ANS Alo known as the Financial Services Modernization Act
of 1999, GLBA is a United States federal law to control the ways that financial institutions deal
with the private information of individuals.
Health Information - ANS Any information related to the past, present or future physical or
mental condition, provision of health care or payment for health care for a specific individual.
Health Insurance Portability and Accountability Act of 1996 (HIPAA) - ANS A U.S. law passed
to create national standards for electronic healthcare transactions, among other purposes.
HIPAA required the U.S. Department of Health and Human Services to promulgate regulations
to protect the privacy and security of personal health information. The basic rule is that patients
3 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
