CIPP/US | 204 Questions and Answers with complete solution

Types of Privacy (4 types) - 1. Information Privacy 2. Bodily Privacy 3. Communication Privacy 4. Territorial Privacy Personal vs. Non-personal Information - Personal Information is any information that relates to or describes an individual. Non personal information is any data that couldn't reasonably relate to an identified or identifiable individual. Sensitive Data (According to the EU Data Protection Directive) - Referred to as "Special Categories of Data", this is information that reveals racial origin, political opinions, religious or philosophical beliefs, trade union membership, or data concerning health or sex life. Noted that health data is classified as sensitive in most countries. Source of Information (3 types and what they are) - 1. Public Records are information collected by and maintained by government and available to the public 2. Publicly available data is data in any form that is accessible to the interested public 3. Non-public information is data that has not been made available to the public. Data Controller - Person or entity that determines the purpose and means of the processing of personal data. Data Processor - The person or entity that processes personal data on behalf of the controller. Data Subject - The person about whom the personal data relates or describes. Privacy Policy - An internal statement that describes an organization's information handling practices and procedures. Directed at employees and agents of the organization.Privacy Notice - AN external statement that is directed to an organization's potential and actual customers or users. Describes how the organization will process personal information and typically describes options a data subject has with respect to the organization's processing of personal information. Administrative Safeguards (and examples) - Management related policies and procedures for protecting personal information. An incident management plan and privacy policy are examples.