CIPP-US EXAM QUESTIONS WITH
CORRECT ANSWERS
Access |- |CORRECT |ANSWER✔✔-The |ability |to |view |personal |information |held |by |an |
organization. |This |may |be |supplemented |by |allowing |updates |or |corrections |to |the |
information. |U.S. |laws |often |provide |for |access |and |correction |when |the |information |is |used |
for |any |type |of |substantive |decision |making, |such |as |for |credit |reports.
Americans |with |Disabilities |Act |(ADA) |- |CORRECT |ANSWER✔✔-Bars |discrimination |against |
qualified |individuals |with |disabilities; |places |restrictions |on |pre-employment |medical |
screening.
Consumer |Financial |Protection |Bureau |(CFPB) |- |CORRECT |ANSWER✔✔-Has |enforcement |
power |for |unfair, |deceptive |or |abusive |acts |and |practices |for |financial |institutions.
Choice |- |CORRECT |ANSWER✔✔-The |ability |to |specify |whether |personal |information |will |be |
collected |and/or |how |it |will |be |used |or |disclosed. |Choice |can |be |express |or |implied.
Common |Law |- |CORRECT |ANSWER✔✔-Legal |principles |that |have |developed |over |time |in |
judicial |decisions |(case |law), |often |drawing |on |social |customs |and |expectations.
Consent |Decree |- |CORRECT |ANSWER✔✔-A |judgment |entered |by |consent |of |the |parties |(a |
federal |or |state |agency |and |an |adverse |party) |whereby |the |defendant |agrees |to |stop |alleged |
illegal |activity, |typically |without |admitting |guilt |or |wrongdoing.
Consumer |Reporting |Agency |(CRA) |- |CORRECT |ANSWER✔✔-Any |person |or |entity |that |
complies |or |evaluates |personal |information |for |the |purpose |of |furnishing |consumer |reports |to |
third |parties |for |a |fee.
,Data |Breach |- |CORRECT |ANSWER✔✔-The |intentional |or |unintentional |release |of |secure |
information |to |an |untrusted |environment.
Data |Classification |- |CORRECT |ANSWER✔✔-Defines |the |clearance |of |individuals |who |can |
access |or |handle |a |given |set |of |data, |as |well |as |the |baseline |level |of |protection |that |is |
appropriate |for |that |data.
Deceptive |Trade |Practices |- |CORRECT |ANSWER✔✔-Along |with |unfair |trade |practices, |behavior |
of |an |organization |that |can |be |enforced |against |by |the |FTC.
Defamation |- |CORRECT |ANSWER✔✔-Any |act |or |communication |intending |to |harm |the |
reputation |of |another |as |to |lower |him |in |the |estimation |of |the |community |or |to |deter |third |
persons |from |associating |or |dealing |with |him.
Electronic |Discovery |(e-discovery) |- |CORRECT |ANSWER✔✔-Discovery |in |civil |litigation |dealing |
with |the |exchange |of |information |in |electronic |format, |often |requiring |digital |forensics |
analysis.
Electronically |Stored |Information |(ESI) |- |CORRECT |ANSWER✔✔-A |category |of |information |that |
can |include |e-mail, |word-processing |documents, |server |logs, |instant |messaging |transcripts, |
voicemail |systems, |social |networking |records, |thumb |drives, |or |data |on |SD |cards.
Equal |Employment |Opportunity |Commission |(EEOC) |- |CORRECT |ANSWER✔✔-A |federal |agency |
overseeing |many |laws |preventing |discrimination |in |the |workplace, |include |Title |VII |of |the |Civil |
Rights |Act, |the |Age |Discrimination |in |Employment |Act |of |1967 |(ADEA) |and |Titles |I |and |V |of |the
|Americans |with |Disabilities |Act |of |1990 |(ADA).
Evidentiary |Privilege |- |CORRECT |ANSWER✔✔-Privileges |limiting |or |prohibiting |disclosure |of |
personal |information |in |the |context |of |investigations |and |litigation, |such |as |attorney-client |
privilege.
, Fair |Credit |Reporting |Act |(FCRA) |- |CORRECT |ANSWER✔✔-Enacted |in |1970 |to |regulate |the |
consumer |reporting |industry |and |provide |privacy |rights |in |consumer |reports, |FCRA |mandates |
accurate |and |relevant |data |collection, |provides |consumers |with |the |ability |to |access |and |
correct |their |information, |and |limits |the |use |of |consumer |reports |to |defined |permissible |
purposes.
Federal |Trade |Commission |(FTC) |- |CORRECT |ANSWER✔✔-An |independent |consumer |
protection |agency |governed |by |a |chairman |and |four |other |commissioners |with |the |authority |
to |enforce |against |unfair |and |deceptive |trade |practices.
Global |Privacy |Enforcement |Network |(GPEN) |- |CORRECT |ANSWER✔✔-Established |in |2010 |by |
the |FTC |and |enforcement |authorities |from |around |the |world, |the |GPEN |aims |to |promote |
cross-border |information |sharing |as |well |as |investigation |and |enforcement |cooperation |among
|privacy |authorities |around |the |world.
Gramm-Leach |Bliley |Act |(GLBA) |- |CORRECT |ANSWER✔✔-Alo |known |as |the |Financial |Services |
Modernization |Act |of |1999, |GLBA |is |a |United |States |federal |law |to |control |the |ways |that |
financial |institutions |deal |with |the |private |information |of |individuals.
Health |Information |- |CORRECT |ANSWER✔✔-Any |information |related |to |the |past, |present |or |
future |physical |or |mental |condition, |provision |of |health |care |or |payment |for |health |care |for |a |
specific |individual.
Health |Insurance |Portability |and |Accountability |Act |of |1996 |(HIPAA) |- |CORRECT |ANSWER✔✔-A
|U.S. |law |passed |to |create |national |standards |for |electronic |healthcare |transactions, |among |
other |purposes. |HIPAA |required |the |U.S. |Department |of |Health |and |Human |Services |to |
promulgate |regulations |to |protect |the |privacy |and |security |of |personal |health |information. |The
|basic |rule |is |that |patients |have |to |opt-in |before |their |information |can |be |shared |with |other |
organizations |- |although |there |are |important |exceptions |such |for |treatment, |payment |and |
healthcare |operations.
CORRECT ANSWERS
Access |- |CORRECT |ANSWER✔✔-The |ability |to |view |personal |information |held |by |an |
organization. |This |may |be |supplemented |by |allowing |updates |or |corrections |to |the |
information. |U.S. |laws |often |provide |for |access |and |correction |when |the |information |is |used |
for |any |type |of |substantive |decision |making, |such |as |for |credit |reports.
Americans |with |Disabilities |Act |(ADA) |- |CORRECT |ANSWER✔✔-Bars |discrimination |against |
qualified |individuals |with |disabilities; |places |restrictions |on |pre-employment |medical |
screening.
Consumer |Financial |Protection |Bureau |(CFPB) |- |CORRECT |ANSWER✔✔-Has |enforcement |
power |for |unfair, |deceptive |or |abusive |acts |and |practices |for |financial |institutions.
Choice |- |CORRECT |ANSWER✔✔-The |ability |to |specify |whether |personal |information |will |be |
collected |and/or |how |it |will |be |used |or |disclosed. |Choice |can |be |express |or |implied.
Common |Law |- |CORRECT |ANSWER✔✔-Legal |principles |that |have |developed |over |time |in |
judicial |decisions |(case |law), |often |drawing |on |social |customs |and |expectations.
Consent |Decree |- |CORRECT |ANSWER✔✔-A |judgment |entered |by |consent |of |the |parties |(a |
federal |or |state |agency |and |an |adverse |party) |whereby |the |defendant |agrees |to |stop |alleged |
illegal |activity, |typically |without |admitting |guilt |or |wrongdoing.
Consumer |Reporting |Agency |(CRA) |- |CORRECT |ANSWER✔✔-Any |person |or |entity |that |
complies |or |evaluates |personal |information |for |the |purpose |of |furnishing |consumer |reports |to |
third |parties |for |a |fee.
,Data |Breach |- |CORRECT |ANSWER✔✔-The |intentional |or |unintentional |release |of |secure |
information |to |an |untrusted |environment.
Data |Classification |- |CORRECT |ANSWER✔✔-Defines |the |clearance |of |individuals |who |can |
access |or |handle |a |given |set |of |data, |as |well |as |the |baseline |level |of |protection |that |is |
appropriate |for |that |data.
Deceptive |Trade |Practices |- |CORRECT |ANSWER✔✔-Along |with |unfair |trade |practices, |behavior |
of |an |organization |that |can |be |enforced |against |by |the |FTC.
Defamation |- |CORRECT |ANSWER✔✔-Any |act |or |communication |intending |to |harm |the |
reputation |of |another |as |to |lower |him |in |the |estimation |of |the |community |or |to |deter |third |
persons |from |associating |or |dealing |with |him.
Electronic |Discovery |(e-discovery) |- |CORRECT |ANSWER✔✔-Discovery |in |civil |litigation |dealing |
with |the |exchange |of |information |in |electronic |format, |often |requiring |digital |forensics |
analysis.
Electronically |Stored |Information |(ESI) |- |CORRECT |ANSWER✔✔-A |category |of |information |that |
can |include |e-mail, |word-processing |documents, |server |logs, |instant |messaging |transcripts, |
voicemail |systems, |social |networking |records, |thumb |drives, |or |data |on |SD |cards.
Equal |Employment |Opportunity |Commission |(EEOC) |- |CORRECT |ANSWER✔✔-A |federal |agency |
overseeing |many |laws |preventing |discrimination |in |the |workplace, |include |Title |VII |of |the |Civil |
Rights |Act, |the |Age |Discrimination |in |Employment |Act |of |1967 |(ADEA) |and |Titles |I |and |V |of |the
|Americans |with |Disabilities |Act |of |1990 |(ADA).
Evidentiary |Privilege |- |CORRECT |ANSWER✔✔-Privileges |limiting |or |prohibiting |disclosure |of |
personal |information |in |the |context |of |investigations |and |litigation, |such |as |attorney-client |
privilege.
, Fair |Credit |Reporting |Act |(FCRA) |- |CORRECT |ANSWER✔✔-Enacted |in |1970 |to |regulate |the |
consumer |reporting |industry |and |provide |privacy |rights |in |consumer |reports, |FCRA |mandates |
accurate |and |relevant |data |collection, |provides |consumers |with |the |ability |to |access |and |
correct |their |information, |and |limits |the |use |of |consumer |reports |to |defined |permissible |
purposes.
Federal |Trade |Commission |(FTC) |- |CORRECT |ANSWER✔✔-An |independent |consumer |
protection |agency |governed |by |a |chairman |and |four |other |commissioners |with |the |authority |
to |enforce |against |unfair |and |deceptive |trade |practices.
Global |Privacy |Enforcement |Network |(GPEN) |- |CORRECT |ANSWER✔✔-Established |in |2010 |by |
the |FTC |and |enforcement |authorities |from |around |the |world, |the |GPEN |aims |to |promote |
cross-border |information |sharing |as |well |as |investigation |and |enforcement |cooperation |among
|privacy |authorities |around |the |world.
Gramm-Leach |Bliley |Act |(GLBA) |- |CORRECT |ANSWER✔✔-Alo |known |as |the |Financial |Services |
Modernization |Act |of |1999, |GLBA |is |a |United |States |federal |law |to |control |the |ways |that |
financial |institutions |deal |with |the |private |information |of |individuals.
Health |Information |- |CORRECT |ANSWER✔✔-Any |information |related |to |the |past, |present |or |
future |physical |or |mental |condition, |provision |of |health |care |or |payment |for |health |care |for |a |
specific |individual.
Health |Insurance |Portability |and |Accountability |Act |of |1996 |(HIPAA) |- |CORRECT |ANSWER✔✔-A
|U.S. |law |passed |to |create |national |standards |for |electronic |healthcare |transactions, |among |
other |purposes. |HIPAA |required |the |U.S. |Department |of |Health |and |Human |Services |to |
promulgate |regulations |to |protect |the |privacy |and |security |of |personal |health |information. |The
|basic |rule |is |that |patients |have |to |opt-in |before |their |information |can |be |shared |with |other |
organizations |- |although |there |are |important |exceptions |such |for |treatment, |payment |and |
healthcare |operations.
