OA Study Guide for D333
Foreign Corrupt Practices Act (FCPA)
Makes it a crime to bribe a foreign official, a foreign political party official, or a candidate for foreign political office. The act applies to any U.S. citizen or company and to any company with shares listed on
any U.S. stock exchange.
US-CERT (U.S. Computer Emergency Readiness Team)
Is a partnership between DHS and the public and private sectors that was established to protect the nation's
Internet infrastructure against cyberattacks by serving as a
clearinghouse for information on new viruses, worms, and other computer security topics.
Fair Credit Reporting Act
Regulates operations of credit
reporting bureaus.
Right to Financial Privacy Act
Protects the financial records of financial institution customers from unauthorized scrutiny by the federal
government.
Gramm-Leach-Bliley Act (GLBA)
Established mandatory guidelines for the collection and disclosure of personal financial information by financial institutions; requires financial institutions to document their data security plans; and encourages institutions to implement safeguards against pretexting. Fair and Accurate Credit Transaction Act
Allows consumers to request and obtain a free credit report each year
from each of the three consumer credit reporting agencies.
HIPAA (Health Insurance Portability and Accountability Act)
Defined numerous standards to improve the portability and continuity of health insurance coverage; reduce
fraud, waste, and abuse in health insurance care and healthcare
delivery; and simplify the administration of health insurance.
American Recovery and Reinvestment Act
Included strong privacy provisions for EHRs, including banning the sale of health information, promoting the use of audit trails and encryption, and providing rights of access for patients. It also mandated that each individual whose health information has been
exposed be notified within 60 days after discovery of a data breach.
FERPA (Family Educational Rights and Privacy Act)
Provides students and their parents with specific rights regarding the release of student records.
COPPA (Children's Online Privacy Protection Act)
Requires websites that cater to children to offer comprehensive privacy policies, notify parents or guardians about their data collection practices, and receive parental
consent before collecting any personal information from
children under the age of 13. Wiretap Act (Title III of the Omnibus Crime Control and Safe Streets Act)
Regulates the interception of
wire (telephone) and oral communications.
FISA (Foreign Intelligence Surveillance Act)
Describes procedures for the electronic surveillance and collection of foreign intelligence information between foreign powers and agents of foreign powers.
Executive Order 12333
Identifies the various government
intelligence-gathering agencies and defines what information can be collected, retained, and disseminated by the agencies. It allows for the tangential collection of U.S. citizen data—even when those citizens are not specifically targeted.
ECPA (Electronic Communications Privacy Act)
Deals with the protection of communications while in transit from sender to receiver; the protection of
communications held in electronic storage; and the prohibition of devices from recording dialing, routing, addressing, and signaling information without a search warrant.
CALEA (Communications Assistance for Law Enforcement Act)
Requires the telecommunications industry to build tools into its products that federal investigators can use—after gaining a court order—to eavesdrop on conversations and
intercept electronic communications.
Foreign Corrupt Practices Act (FCPA)
Makes it a crime to bribe a foreign official, a foreign political party official, or a candidate for foreign political office. The act applies to any U.S. citizen or company and to any company with shares listed on
any U.S. stock exchange.
US-CERT (U.S. Computer Emergency Readiness Team)
Is a partnership between DHS and the public and private sectors that was established to protect the nation's
Internet infrastructure against cyberattacks by serving as a
clearinghouse for information on new viruses, worms, and other computer security topics.
Fair Credit Reporting Act
Regulates operations of credit
reporting bureaus.
Right to Financial Privacy Act
Protects the financial records of financial institution customers from unauthorized scrutiny by the federal
government.
Gramm-Leach-Bliley Act (GLBA)
Established mandatory guidelines for the collection and disclosure of personal financial information by financial institutions; requires financial institutions to document their data security plans; and encourages institutions to implement safeguards against pretexting. Fair and Accurate Credit Transaction Act
Allows consumers to request and obtain a free credit report each year
from each of the three consumer credit reporting agencies.
HIPAA (Health Insurance Portability and Accountability Act)
Defined numerous standards to improve the portability and continuity of health insurance coverage; reduce
fraud, waste, and abuse in health insurance care and healthcare
delivery; and simplify the administration of health insurance.
American Recovery and Reinvestment Act
Included strong privacy provisions for EHRs, including banning the sale of health information, promoting the use of audit trails and encryption, and providing rights of access for patients. It also mandated that each individual whose health information has been
exposed be notified within 60 days after discovery of a data breach.
FERPA (Family Educational Rights and Privacy Act)
Provides students and their parents with specific rights regarding the release of student records.
COPPA (Children's Online Privacy Protection Act)
Requires websites that cater to children to offer comprehensive privacy policies, notify parents or guardians about their data collection practices, and receive parental
consent before collecting any personal information from
children under the age of 13. Wiretap Act (Title III of the Omnibus Crime Control and Safe Streets Act)
Regulates the interception of
wire (telephone) and oral communications.
FISA (Foreign Intelligence Surveillance Act)
Describes procedures for the electronic surveillance and collection of foreign intelligence information between foreign powers and agents of foreign powers.
Executive Order 12333
Identifies the various government
intelligence-gathering agencies and defines what information can be collected, retained, and disseminated by the agencies. It allows for the tangential collection of U.S. citizen data—even when those citizens are not specifically targeted.
ECPA (Electronic Communications Privacy Act)
Deals with the protection of communications while in transit from sender to receiver; the protection of
communications held in electronic storage; and the prohibition of devices from recording dialing, routing, addressing, and signaling information without a search warrant.
CALEA (Communications Assistance for Law Enforcement Act)
Requires the telecommunications industry to build tools into its products that federal investigators can use—after gaining a court order—to eavesdrop on conversations and
intercept electronic communications.
