CIPP US questions with correct answers

OECD - Purpose Specification Answer The purposes for which personal data are collected should be specified not later than at the time of collection and the subsequent use limited to the fulfilment of those purposes as specified o each occasion of change of purpose. What is the fundamental basis of the relationship between employer and employee in the U.S. Answer Contract Law Information Life Cycle Phases Answer 1. Collect/Derive 2. Use/Process 3. Disclose/Transfer 4. Store/Retain/Archive/Delete A privacy impact assessment process helps Answer determine the risks associated with a new operation CA Security Breach Notification Law SB1386 Answer Personal Information = Name plus one or more: SSN, DL#, ID#, Credit Card # If a company located in Massachusetts maintains all of its employees' personal information in a hosted online database inf Florida, what must the third-party service provider agree to? Answer A confidentiality provision GeoCities, Inc Answer 1st FTC Internet Privacy Action Offered websites to users, promised informatio