Font size
Worksheets2020 CIPP/US Week 1
Total questions: 25
Worksheet time: 25mins
This branch of government can sign or veto laws and appoints judges
Executive
Legislative
Judicial
Congress may delegate powers to federal agencies
True
False
Federal branch of government that makes laws
Executive
Legislative
Judicial
The highest U.S. federal court
-also known as the "Highest Court of the Land"
-limited jurisdiction
-9 justices
Supreme Court
Court of Appeal
Circuit Court
District Court
Court of Federal Claims
Federal court that has
-assigned cases from lower district courts
-12 regional circuits
-not trial courts
Supreme Court
Circuit Court of Appeal
US Tax Court
District Court
Court of Federal Claims
Lowest federal court
-assigned to a circuit
-no appellate jurisdiction
Supreme Court
Circuit Court of Appeal
US Tax Court
District Court
Court of Federal Claims
Laws based on judges final court decisions
(a)
Legal principles that have developed over time in judicial cases
common laws
regulations
legislation
the Constitution
Consent Decree is (select all that apply)
common laws and principals developed over time
judgement entered by consent of parties and approved by a judge
targeted at singular activities
specific to CAN-SPAM only
agreement by defendant to stop alleged illegal activity but does not admit guilt/wrong doing
Which is the best description of the U.S. legal concept of "preemption"?
States are prevented by federal law from passing any laws that regulate financial privacy.
The superior government has the right to supersede the lesser government’s laws.
State laws supersede federal law in certain areas such as marketing.
The EU General Data Protection Regulation (GDPR) takes precedence over U.S. law, federal or state.
Each of the following are considered acceptable reasons for sharing records of U.S. employees with third parties without obtaining the consent of the employees EXCEPT:
Test marketing the company's new products.
Determining legal standing or citizen status.
Planning for employee retirement.
Underwriting group insurance policies.
What is the primary basis of common law?
Statutes enacted by legislative bodies.
Legal precedent and social customs.
Laws guaranteed by the Constitution of the United States of America.
Regulations that are promulgated by state and federal agencies.
Which federal agency has specific statutory responsibility for issues such as children's privacy online and commercial email marketing?
Securities and Exchange Commission.
Consumer Financial Protection Bureau.
Department of Justice.
Federal Trade Commission.
Each of the following are examples of self-regulation and enforcement of privacy protections for U.S.-based companies EXCEPT:
A company chooses to adopt and follow an industry code of conduct and the Federal Trade Commission (FTC) brings a Section 5 FTC Act enforcement action for failing to comply.
A hospital fails to provide a detailed privacy notice to its patients at the first service date, resulting in a Health and Human Services (HHS), Office of Civil Rights enforcement action.
A merchant accepts credit card payments and adopts the PCI Security Standards Council rules, then faces fines and exclusion from major payment card systems for failing to comply.
An online advertiser’s Digital Advertising Alliance (DAA) membership is revoked and it is reported to the FTC by the Association of National Advertisers (ANA) for failure to comply with its own privacy policy.
Which of these conditions are optional to satisfy the Right to Financial Privacy Act requirements for disclosure of individual records by financial institutions? (Select all that apply)
Financial records are reasonably described
Customer authorizes access
an appropriate judicial subpoena
A search warrant
What are the classes/categories of Privacy?
There are 4 classes:
Information
Personal
Territorial
Communications
There are 5 classes:
Information
Bodily
Financial
Territorial
Communications
There are 4 classes:
Information
Bodily
Territorial
Communications
There are 3 classes:
Information
Bodily
Financial
There are 4 classes:
Information
Health
Financial
Communications
What is the role of a U.S.-based software-as-a-service provider that stores employee personal data for a global company headquartered in the U.S. with subsidiaries in the EU?
data controller
data owner
data processor
data subject
Which agency outside of the Federal Trade Commission
and Federal Communications Commission is most likely to enforce privacy for a medical research company?
Department of Health and Human Services
Department of Transportation
Office of Comptroller of the Currency
Department of Commerce
When would the Health Insurance Portability and Accountability Act privacy rule be least relevant?
Health savings account statements
when doctors are not involved
patients underaged with parental consent
when the data is de-identified
An online company is in the process of developing its privacy policy and code. When customers place orders for delivery with their personal information they are provided a link explaining the code is being developed. What Fair Information Practice is most likely violated?
Choice
Notice
Consent
Access
Collection
Which of the following may be classified as an unfair trade practice by the FTC?
A website’s privacy notice clearly states that it will not encrypt sensitive personal information, and the website does not in fact encrypt the data
A company's employee records are hacked and they do not notify the state AG as required
An organization promises to honor opt-out requests within 10 days but fails to honor opt-out requests
A US federally insured bank does not comply GLBA.
The PRIMARY enforcer of the HIPAA Privacy rule and can assess civil monetary penalties?
Federal Communications Commission
HHS Office for Civil Rights
State Attorney General
US Department of Justice
The following are all examples of NPI except:
Account numbers
gender
name
telephone number
sales price
Public records and publicly available information are both provided by the government and available on the internet
True
False
Per the text: organization life cycles should include
Notice, collection, use and retention, disclosure
Collection, use and retention, disclosure
Notice, collection, use and retention, disclosure, monitoring and enforcement
Notice, collection, use and retention, management
