Which of the following is not PII?

• Customer name

• Customer ID number

• Customer Social Security number or taxpayer identification number

• Customer birth date

What does a privacy impact assessment do?

• It determines the gap between a company’s privacy practices and required actions.

• It determines the damage caused by a breach of privacy.

•  It determines what companies hold information on a specific person.

• It’s a corporate procedure to safeguard PII.

What is privacy?

• One’s ability to control information about oneself

• Being able to keep one’s information secret

• Making data-sharing illegal without consumer consent

• Something that is outmoded in the Internet age

Who is responsible for determining what data is needed by the enterprise?

• Data steward

• Data privacy officer

• Data custodian

• Data owner

Data that is labeled “private” typically pertains to what category?

A.

B.

C.

D.

• Proprietary data

• Confidential information

• Legal data

• Personal information

Data that is labeled “proprietary” typically pertains to what category?

• Information under legal hold

•  Information to be safeguarded by business partners because it contains business secrets

• Personal data

• PHI and PII together

Information that could disclose the identity of a customer is referred to as what?

• Customer identity information (CII)

• Personally identifiable information (PII)

• Privacy protected information (PPI)

• Sensitive customer information (SCI)

Which of the following is not a privacy-enhancing technology?

• Data minimization

• Data masking

• Data disclosure

• Tokenization

What is the term for notifying customers of your privacy policy and its effect on their information?

• Impact assessment

• Public notification of disclosure

• Privacy notice

• Terms of agreement

Which of the following is important to ensure privacy release concerns are properly handled when discovered by an incident response team?

• Escalation

• Privacy impact analysis

• Privacy-enhancing technologies

• Public disclosure and notification