Anchor

Accountability - Answer-A fair information practices principle, it is the idea that when personal information is to be transferred to another person or organization, the personal information controller should obtain the consent of the individual or exercise due diligence and take reasonable steps to ensure that the recipient person or organization will protect the information consistently with other fair use principles. Adequate level of protection - Answer-A label that the EU may apply to th...

Legal, Reputational, Operational, and Investment Risks - Answer-The four risks associated with using PI Improperly Four basic steps of information management - Answer-1. Discover- Issue identification and self assessment and determination of best practices 2. Build- Procedure development and verification; full implementation 3. Communicate- Documentation and Education 4. Evolve- Affirmation and monitoring; adaptation Data Classification - Answer-After a data inventory has been performe...

3 Categories of People - Answer-Privacy Fundamentalists (Strong Desire to Protect Privacy) Privacy Unconcerned (Low Worries about Privacy) Privacy Pragmatists (Varies with Context. Give up for Benefits) Personal Information - 4 Risks - Answer-1) Legal - Compliance with Laws, Contracts & Industry Standards 2) Reputational 3) Operational (Administratively Efficient) 4) Investment (Return on Investments in Light of Privacy Laws & Standards) 4 Basic Steps for Information Managem...

3 branches of US Gov't & functions - Answer-Legislative - make laws Executive - enforce laws Judicial - interpret laws What state constit explicitly recognizes rt to privacy? - Answer-California 10th Amdmt - Answer-Where no fed law prevents it, states may make law. Federal Preemption? - Answer-A superior govt's ability to have its laws supersede those of an inferior govt. CAN-SPAM FCRA (?) Not preempted - Answer-HIPAA data breach notification (gen) stare decisis = - Answer...

"SWIFT" OPC-initiated Complaint v. SWIFT - Answer-OPC PIPEDA applied: SWIFT had a "significant presence" in Canada; Vast majority of international transfers of PI utilized the SWIFT network. Orgs like SWIFT are allowed, via PIPEDA, to disclose w/out consent - legitimate laws of other countries. 2006 "SWIFT" Individual Complaint v. 6 Canadian FIs - Answer-OPC PIPEDA applied: SWIFT had a "significant presence" in Canada; Vast majority of international transfers of PI utilized the SW...

OECD - Purpose Specification - Answer-The purposes for which personal data are collected should be specified not later than at the time of collection and the subsequent use limited to the fulfilment of those purposes as specified o each occasion of change of purpose. What is the fundamental basis of the relationship between employer and employee in the U.S. - Answer-Contract Law Information Life Cycle Phases - Answer-1. Collect/Derive 2. Use/Process 3. Disclose/Transfer 4. Store/Reta...

ADA - Answer-Americans with Disabilities Act (ADA) Antidiscrimination Laws - Answer-US federal laws that prohibit discrimination in employment and have sometimes been used to limit background checks. Background Screening - Answer-Pre-employment review of criminal, commercial and financial records of an individual or org, regulated by federal and state laws. Bring Your Own Device (BYOD) - Answer-Strategy allowing employees to use their personal computing devices for work purposes. Benefi...

Which is the best description of the U.S. legal concept of "preemption"? A. States are prevented by federal law from passing any laws that regulate financial privacy. B. The superior government has the right to supersede the lesser governments' laws. C. State laws supersede federal law in certain areas, such as marketing. D. The EU General Data Protection Regulation (GDPR) takes precedence over U.S. law, federal or state. - Answer-B. The superior government has the right to supersed...

Prohibition of cross border data transfers under Data Privacy Directive 95/46/EC apply when - Answer-data transferred from a jurisdiction in the EU to a third country. What treaty or convention allowed the Data Protection Directive 95/46/EC to be used as a harmonising measure for European Member states. - Answer-The Treaty of Rome Direct marketing would include: - Answer-Email promoting new book on sale. What two opposing forces needed to be considered in formulating a privacy framework...

What kind of liability may only be asserted in court by governmental authorities and not by a private citizen? A. Civil B. Negligence C. Criminal D. Invasion of privacy - Answer-C Which of the following preemployment screening activities would turn a regular consumer report into an investigative report? A. The report includes information about prior bankruptcies. B. The CRA furnishing the report includes information about a job seeker's mortgage payments. C. The preemployment screenin...

Canadian Legal System - Answer-Federal - Powers of the Constitution Trade and Commerce (privacy), Criminal law, banking, national defense. Provincial - Division of Powers Civil and Property Rights (privacy), hospitals, education, municipalities Territorial - Usually fall under federal - do have some public sector privacy laws Canadian Laws anchored in OECD Principles - Answer-Accountability Purpose Specification Collection Limitation Use Limitation Data Quality Security Safeguards...

University Data - Answer-Anna is a lawyer for university tasked with student records. Frank is professor. 4 Types of Data 1. Student Data - Personal Info 2. Employee Data - Personal Info 3. Alumni Data - Personal Info 4. Department of Education: Demographic - no personal identifiers University Data Continued - Answer-Frank wants to build a database to process data and see how 1st year student in his class progress. He builds algorithm to process data without identifiers, all UNV s...

Types of Privacy (4 types) - Answer-1. Information Privacy 2. Bodily Privacy 3. Communication Privacy 4. Territorial Privacy Personal vs. Non-personal Information - Answer-Personal Information is any information that relates to or describes an individual. Non personal information is any data that couldn't reasonably relate to an identified or identifiable individual. Sensitive Data (According to the EU Data Protection Directive) - Answer-Referred to as "Special Categories of Data", t...

FERPA - Answer-Family Educational Rights and Privacy Act What are the Principal Rights granted to students under FERPA - Answer-1) Control the disclosure of their education records to others. 2) Review and seek amendment of their own education records. 3) Receive annual notice of their rights under FERPA. 4)File complaints with the U.S Department of Education Is there a private right of action under FERPA? - Answer-There is no Private Right of Action under FERPA Name Five types of Re...

Which of the following data protection milestones is a treaty among member states of the Council of Europe: -Data Retention Directive -Charter of Fundamental Rights -Convention 108 -e-Privacy Directive -GDPR - Answer-Convention 108 Which of the following data protection milestones applies to public electronics communications services and networks? -Data Retention Directive -Charter of Fundamental Rights -Convention 108 -e-Privacy Directive -GDPR - Answer-e-Privacy Directive The U...

a nurse is preparing to conduct a cardiovascular assessment on a client. which of the following actions should the nurse plan to take? - Answer-auscultate the apical pulse ask the client if they experience shortness of breath check the color of the client's skin inspect the extremities for the presence of edema a nurse is auscultating heart sounds. Identify the location where the apical pulse is auscultated - Answer-D, under the left nipple a nurse is completing a medical history on a ...

A nurse is teaching a class about error-prone abbreviations in medication prescriptions. The nurse should include that which of the following prescriptions has acceptable abbreviations. - Answer-Metoclopramide 10 mg IM Q6H PRN nausea A nurse is preparing to medication and calculates the dosage as 1.42 mL. Rounding this amount to the nearest tenth, the nurse should administer how many mL? - Answer-1.4 A nurse is preparing to administer diphenhydramine 25 mg PO every 6 hr. Available is diphe...

A nurse is assisting with conducting a home hazard assessment for a client who has dementia. Which of the following findings indicates an understanding of home safety? a) an extension cord is secured under a rug b) the edges of stairs are marked with brightly colored tape c) a toaster is plugged in when not in use d) the water heater is set to 55 degrees C - Answer-b) the edges of stairs are marked with brightly colored tape A nurse is preparing to conduct a fall risk screening on a cli...

A nurse assesses a clients respiratory rate and is that it is below the expected reference range. The nurse should identify that which of the following findings can cause a decreased respiratory rate? - Answer-The client takes a narcotic pain medication for chronic pain. A nurse is caring for a middle adult client who has stomatitis and is unable to hold an oral probe in their mouth. Which of the following alternative routes should the nurse used to obtain the most accurate core temperature o...

A charge nurse is preparing to discuss critical thinking skills with a group of newly licensed nurses. Which of the following skills should the nurse plan to include in the discussion? - Answer-Inference, creativity, inductive reasoning A nurse is caring for a client who has been wheezing. The nurse asked an assistive personnel do use a stethoscope and listen to the clients lung sounds to determine if their wheezing has improved. This is an example of which of the following concepts? - Answer...