IAPP IAPP Certifications CIPP-US Questions & Answers

• Question 101:

  What is the most likely reason that states have adopted their own data breach notification laws?

  A. Many states have unique types of businesses that require specific legislation

  B. Many lawmakers believe that federal enforcement of current laws has not been effective

  C. Many types of organizations are not currently subject to federal laws regarding breaches

  D. Many large businesses have intentionally breached the personal information of their customers

  Correct Answer: B

• Question 102:

  Which federal law or regulation preempts state law?

  A. Health Insurance Portability and Accountability Act

  B. Controlling the Assault of Non-Solicited Pornography and Marketing Act

  C. Telemarketing Sales Rule

  D. Electronic Communications Privacy Act of 1986

  Correct Answer: B

• Question 103:

  More than half of U.S. states require telemarketers to?

  A. Identify themselves at the beginning of a call

  B. Obtain written consent from potential customers

  C. Register with the state before conducting business

  D. Provide written contracts for customer transactions

  Correct Answer: C

  For example, more than half the states require that telemarketers obtain a license or register with the state.39”

  Excerpt From: “IAPP_US_TB_US-Private-Sector-Privacy-3E_1.0.” Apple Books.

  “states may require that a written contract be created for certain transaction”.

  Excerpt From: “IAPP_US_TB_US-Private-Sector-Privacy-3E_1.0.” Apple Books.

• Question 104:

  How did the Fair and Accurate Credit Transactions Act (FACTA) amend the Fair Credit Reporting Act (FCRA)?

  A. It expanded the definition of "consumer reports" to include communications relating to employee investigations

  B. It increased the obligation of organizations to dispose of consumer data in ways that prevent unauthorized access

  C. It stipulated the purpose of obtaining a consumer report can only be for a review of the employee's credit worthiness

  D. It required employers to get an employee's consent in advance of requesting a consumer report for internal investigation purposes

  Correct Answer: B

• Question 105:

  Which federal act does NOT contain provisions for preempting stricter state laws?

  A. The CAN-SPAM Act

  B. The Children's Online Privacy Protection Act (COPPA)

  C. The Fair and Accurate Credit Transactions Act (FACTA)

  D. The Telemarketing Consumer Protection and Fraud Prevention Act

  Correct Answer: D

• Question 106:

  Which of the following is commonly required for an entity to be subject to breach notification requirements under most state laws?

  A. The entity must conduct business in the state

  B. The entity must have employees in the state

  C. The entity must be registered in the state D. The entity must be an information broker

  Correct Answer: A

• Question 107:

  Which action is prohibited under the Electronic Communications Privacy Act of 1986?

  A. Intercepting electronic communications and unauthorized access to stored communications

  B. Monitoring all employee telephone calls

  C. Accessing stored communications with the consent of the sender or recipient of the message

  D. Monitoring employee telephone calls of a personal nature

  Correct Answer: A

  Reference: https://it.ojp.gov/PrivacyLiberty/authorities/statutes/1285

• Question 108:

  Which of the following does Title VII of the Civil Rights Act prohibit an employer from asking a job applicant?

  A. Questions about age

  B. Questions about a disability

  C. Questions about national origin

  D. Questions about intended pregnancy

  Correct Answer: C

  Reference: https://www.shrm.org/resourcesandtools/tools-and-samples/toolkits/pages/interviewandemploymentapplicationquestions.aspx

• Question 109:

  Which of the following is most likely to provide privacy protection to private-sector employees in the United States?

  A. State law, contract law, and tort law

  B. The Federal Trade Commission Act (FTC Act)

  C. Amendments one, four, and five of the U.S. Constitution

  D. The U.S. Department of Health and Human Services (HHS)

  Correct Answer: A

  Reference: https://corporate.findlaw.com/law-library/right-to-privacy-in-the-workplace-in-the-information-age.html

• Question 110:

  What role does the U.S. Constitution play in the area of workplace privacy?

  A. It provides enforcement resources to large employers, but not to small businesses

  B. It provides legal precedent for physical information security, but not for electronic security

  C. It provides contractual protections to members of labor unions, but not to employees at will

  D. It provides significant protections to federal and state governments, but not to private-sector employment

  Correct Answer: D

  The U.S. Constitution has significant workplace privacy provisions that apply to the federal and state governments, but they do not affect private-sector employment. Notably, the Fourth Amendment prohibits unreasonable searches and seizures by state actors. Courts have interpreted this amendment to place limits on the ability of government employers to search employees’ private spaces, such as lockers and desks.4

  Some states, including California, have extended their constitutional rights to privacy to private-sector employees.5 In general for private-sector actors, however, there is no state action, and no constitutional law governs employment privacy