CIPM- IAPP Latest Update (2022/2023) Graded A+

CIPM- IAPP Latest Update (2022/2023) Graded A+ Audit Life Cycle High-level, five-phase audit approach. The steps include: Audit Planning; Audit Preparation; Conducting the Audit; Reporting; and Follow-up. Active Scanning Tools DLP network, storage, scans and privacy tools can be used to identify security and privacy risks to personal information. They can also be used to monitor for compliance with internal policies and procedures, and block e-mail or file transfers based on the data category and definitions. Anonymization The process in which individually identifiable data is altered in such a way that it no longer can be related back to a given individual. Among many techniques, there are three primary ways that data is anonymized. Suppression is the most basic version of anonymization and it simply removes some identifying values from data to reduce its identifiability. Generalization takes specific identifying values and makes them broader, such as changing a specific age (18) to an age range (18-24). Noise addition takes identifying values from a given data set and switches them with identifying values from another individual in that data set. Note that all of these processes will not guarantee that data is no longer identifiable and have to be performed in such a way that does not harm the usability of the data. Behavioral Advertising advertising that is targeted to particular customers, based on their observed online behavior Binding Corporate Rules An appropriate safeguard allowed by the GDPR to facilitate cross-border transfers of personal data between the various entities of a corporate group worldwide. Bureau of Competition Enforce the US antitrust laws Bureau of Consumer Protection protects consumers against unfair, deceptive, or fraudulent practices by collecting complaints and conducting investigations, suing companies and people that break the law, developing rules to maintain a fair marketplace, and educating consumers. Bureau of Economics Provides economic analysis and support to antitrust and consumer protection investigations Business Case The starting point for assessing the needs of the privacy organization, it defines the individual program needs and the ways to meet specific business goals, such as compliance with privacy laws or regulations, industry frameworks, customer requirements and other considerations. Canadian Institute of Chartered Accountants Responsible for the functions that are critical to the success of the Canadian CA profession. COPPA (Children's Online Privacy Protection Act) Passed in 1998 to protect children from the gathering of their personal information without parental consent. Required to be followed by all websites geared toward children under 13. Choice Choice refers to the idea that consent must be freely given and that data subjects must have a genuine choice as to whether to provide personal data or not. CIA Triad Confidentiality, Integrity, Availability Collection Limitation A fair information practices principle, it is the principle stating there should be limits to the collection of personal data, that any such data should be obtained by lawful and fair means and, where appropriate, with the knowledge or consent of the data subject. Consent Individuals must be able to prevent the collection of their