A System of Records Notice (SORN) is not required if an organization determines that PII will be stored
using a system if records - CORRECT ANSWER true
An organization with an existing system of records decides to start using PII for a new purpose outside
the "routine use" defined in the System of Records Notice (SORN). Is this a permitted use? - CORRECT
ANSWER no
What law establishes the federal government's legal responsibility for safeguarding PII? - CORRECT
ANSWER The Freedom of Information Act (FOIA)
Information that can be combined with other information to link solely to an individual is considered PII
- CORRECT ANSWER true
An organization that fails to protect PII can face consequences including: - CORRECT ANSWER all of the
above
Which of the following are examples of PII? - CORRECT ANSWER - Social Security Number (SSN)
- Driver's License Number
- Fingerprint
1) This regulation governs the DoD Privacy Program
2) This law establishes the public's rigth to access federal government information
3) Thai guidance identifies federal information security controls
4) This law establishes the federal government's legal responsibility for safeguarding PII - CORRECT
ANSWER 1) 5400.11-R: DoD Privacy Program
2) FOIA
3) OMB M-17-12
4) Privacy Act of 1974