CIPP/US STUDY GUIDE Exam QUESTIONS WITH CORRECT ANSWERS

CIPP/US STUDY GUIDE Exam QUESTIONS WITH CORRECT ANSWERS Vendor Contract Issues = - Answer-1. Confidentiality provision 2. No further use of shared info 3. If subcontractors, must follow same priv/sec terms. 4. Requirement to notify and disclose breach 5. Info Security Provisions: specific security controls; encryption & when; network security; access controls; segregation; E'ee bkgrnd checks; audit rights; etc. How to do Due Diligence on Vendors: - Answer-1. Reputation 2. Financial condition & insurance 3. Info security controls in place 4. Point of transfer/ secure mechanism of transfer 5. Info Disposal (see, e.g., FACTA/FCRA Disposal rule) 6. E'ee training & user awareness 7. Vendor incident response provisions History of special protection for health info - Answer-... HIPAA - Answer-(1996) Health Insurance Portability & Accountability Act HITECH - Answer-(2009) Health Info Tech for Econ and Clinical Health Act state health privacy laws - Answer-Can be more strict than fed (not preempted) GINA - Answer-(2008) Genetic Info Nondiscrimination Act