CIPP/US Practice Q&A

Which of the following definitions best defines privacy as cited in the text and related to privacy law? A. The desire of people to freely choose the circumstances and the degree which individuals will expose their attitudes and behavior to others. B. The ability of an individual to not be observed or disturbed by other people. C. The desire of people to be free from surveillance by the government or undue public attention while residing on their personal property. D. The right of an individual or group to seclude themselves from other individuals or organizations. - Answer- A. The desire of people to freely choose the circumstances and the degree which individuals will expose their attitudes and behavior to others.** In most cases, the FTC settles disputes through consent decrees and consent orders. What is the maximum length of a consent decree? A. 5 years B. 10 years C. 20 years D. Indefinitely - Answer- C. 20 years Which step in developing an Information Management Program involves distributing privacy policies and privacy notices? A. Build B. Communicate C. Discover D. Regulate - Answer- B. Communicate Regarding data information management, which of the following tasks can help with compliance audits, quickly comply with legal discovery requests, and ensure data is stored efficiently? A. Data Mapping B. Data Classification C. Data Flow Documentation D. Data Protection Laws - Answer- B. Data Classification Which of the following would NOT fall under the jurisdiction of the GDPR? A. A German company with assets in France and employees in both companies. B. An Italian company selling products and services worldwide. C. A Spanish company that processes data of US citizens. D. A US company who sells products and services in South America. - Answer- D. A US