CIPP US with Explanation

OECD - Purpose Specification - Answer-The purposes for which personal data are collected should be specified not later than at the time of collection and the subsequent use limited to the fulfilment of those purposes as specified o each occasion of change of purpose. What is the fundamental basis of the relationship between employer and employee in the U.S. - Answer-Contract Law Information Life Cycle Phases - Answer-1. Collect/Derive 2. Use/Process 3. Disclose/Transfer 4. Store/Retain/Archive/Delete A privacy impact assessment process helps - Answer-determine the risks associated with a new operation CA Security Breach Notification Law SB1386 - Answer-Personal Information = Name plus one or more: SSN, DL#, ID#, Credit Card # If a company located in Massachusetts maintains all of its employees' personal information in a hosted online database inf Florida, what must the third-party service provider agree to? - Answer-A confidentiality provision GeoCities, Inc - Answer-1st FTC Internet Privacy Action Offered websites to users, promised information would not be sold without consent. Two FTC actions for Unfair and Deceptive Practices - misrepresented how info would be used by reselling to 3rd partied - collected and maintained children's PI without parental consent Consent Order requiring privacy notice and required to obtain parental consent What did the White House recommend in it 2012 report? - Answer-That the Consumer Privacy Bill of Rights be included in Federal Legislation, with use of multistakeholder processes to develop enforceable codes of conduct until legislation is passed. Eli Lilly - Answer-2004 - Pharma Manufacturer's website privacy notice made promises about security and privacy of the information provided by users. An email was sent to all users, revealing all of their identities First time FTC required a company to develop and maintain an information privacy and security program.