CIPM Scenario Practice Questions with Certified Solutions

CIPM Scenario Practice Questions with Certified Solutions SCENARIO ALBERT & TREASURE BOX ANSWER THESE CARDS IN ORDER AND USE THE NEXT CARD FOR THE FOLLOWING QUESTIONS SCENARIO ALBERT & TREASURE BOX For 15 years, Albert has worked at Treasure Box - a mail order company in the United States (U.S.) that used to sell decorative candles around the world, but has recently decided to limit its shipments to customers in the 48 contiguous states. Despite his years of experience, Albert is often overlooked for managerial positions. His frustration about not being promoted, coupled with his recent interest in issues of privacy protection, have motivated Albert to be an agent of positive change. He will soon interview for a newly advertised position, and during the interview, Albert plans on making executives aware of lapses in the company's privacy program. He feels certain he will be rewarded with a promotion for preventing negative consequences resulting from the company's outdated policies and procedures. For example, Albert has learned about the AICPA (American Institute of Certifi USE THIS PARAGRAPH FOR THE NEXT FEW QUESTIONS UNTIL THE NEXT SCENARIO IS LISTED In consideration of the company's new initiatives, which of the following laws and regulations would be most appropriate for Albert to mention at the interview as a priority concern for the privacy team? A. Gramm-Leach-Bliley Act (GLBA) B. The General Data Protection Regulation (GDPR) C. The Telephone Consumer Protection Act (TCPA) D. Health Insurance Portability and Accountability Act (HIPAA) Health Insurance Portability and Accountability Act (HIPAA) (This is important because they are considering acquiring a med co. in the US) On which of the following topics does Albert most likely need additional knowledge? A. The role of privacy in retail companies B. The necessary maturity level of privacy programs C. The possibility of delegating responsibilities related to privacy D. The requirements for a managerial position with privacy protection duties The requirements for a managerial position with privacy protection duties Based on Albert's observations, executive leadership should most likely pay closer attention to what? A. Awareness campaigns with confusing information B. Obsolete