Official (ISC)² CCSP - Domain 6: Legal & Compliance questions with correct answers

Australian Privacy Act 1988 CORRECT ANSWER Regulates the handling of personal information about individuals. This includes the collection, use, storage, and disclosure of personal information, and access to and correction of that information. Criminal Law CORRECT ANSWER A body of rules and statutes that defines conduct that is prohibited by the government and is set out to protect the safety and well-being of the public. Doctrine of the Proper Law CORRECT ANSWER When a conflict of laws occurs; this determines in which jurisdiction the dispute will be heard. eDiscovery CORRECT ANSWER Refers to any process in which electronic data is sought, located, secured, and searched with the intent of using it as evidence in a civil or criminal legal case. EU General Data Protection Regulation 2012 CORRECT ANSWER Will introduce many significant changes for data processors and controllers. The following may be considered as some of the more significant changes: The concept of consent, Transfers Abroad, The right to be forgotten, Establishment of the role of the "Data Protection Officer", Access Requests, Home State Regulation, Increased Sanctions Gramm-Leach-Bliley Act (GLBA) CORRECT ANSWER Federal law enacted in the United States to control the ways that financial institutions deal with the private information of individuals