IAPP CIPP-US Online Practice Questions and Exam Preparation

IAPP CIPP-US Online Questions & Answers

• Question 171:

  Which of the following best describes an employer's privacy-related responsibilities to an employee who has left the workplace?

  A. An employer has a responsibility to maintain a former employee's access to computer systems and company data needed to support claims against the company such as discrimination.
  B. An employer has a responsibility to permanently delete or expunge all sensitive employment records to minimize privacy risks to both the employer and former employee.
  C. An employer may consider any privacy-related responsibilities terminated, as the relationship between employer and employee is considered primarily contractual.
  D. An employer has a responsibility to maintain the security and privacy of any sensitive employment records retained for a legitimate business purpose.
  B. An employer has a responsibility to permanently delete or expunge all sensitive employment records to minimize privacy risks to both the employer and former employee.

  ---

  Explanation

• Question 172:

  best describes how federal anti-discrimination laws protect the privacy of private-sector employees in the United States? Which of the following

  A. They prescribe working environments that are safe and comfortable.
  B. They limit the amount of time a potential employee can be interviewed.
  C. They promote a workforce of employees with diverse skills and interests.
  D. They limit the types of information that employers can collect about employees.
  A. They prescribe working environments that are safe and comfortable.

  ---

  Explanation

• Question 173:

  What is the main purpose of the CAN-SPAM Act?

  A. To diminish the use of electronic messages to send sexually explicit materials
  B. To authorize the states to enforce federal privacy laws for electronic marketing
  C. To empower the FTC to create rules for messages containing sexually explicit content
  D. To ensure that organizations respect individual rights when using electronic advertising
  D. To ensure that organizations respect individual rights when using electronic advertising

  ---

  Explanation

  https://www.ftc.gov/tips-advice/business-center/guidance/can-spam-act-compliance-guide-business

• Question 174:

  According to Section 5 of the FTC Act, self-regulation primarily involves a company's right to do what?

  A. Determine which bodies will be involved in adjudication
  B. Decide if any enforcement actions are justified
  C. Adhere to its industry's code of conduct
  D. Appeal decisions made against it
  C. Adhere to its industry's code of conduct

  ---

  Explanation

  https://www.ftc.gov/about-ftc/what-we-do/enforcement-authority

• Question 175:

  What is the main reason some supporters of the European approach to privacy are skeptical about self-regulation of privacy practices?

  A. A large amount of money may have to be sent on improved technology and security
  B. Industries may not be strict enough in the creation and enforcement of rules
  C. A new business owner may not understand the regulations
  D. Human rights may be disregarded for the sake of privacy
  B. Industries may not be strict enough in the creation and enforcement of rules

  ---

  Explanation

• Question 176:

  Under the Telemarketing Sales Rule, what characteristics of consent must be in place for an organization to acquire an exception to the Do-Not-Call rules for a particular consumer?

  A. The consent must be in writing, must state the times when calls can be made to the consumer and must be signed
  B. The consent must be in writing, must contain the number to which calls can be made and must have an end date
  C. The consent must be in writing, must contain the number to which calls can be made and must be signed
  D. The consent must be in writing, must have an end date and must state the times when calls can be made
  C. The consent must be in writing, must contain the number to which calls can be made and must be signed

  ---

  Explanation

  C: "The TSR allows sellers and telemarketers to call consumers who consent to receive such calls. This consent must be in writing, must state the number to which calls may be made, and must include the consumer’s signature. (A valid electronic signature is acceptable.)"

• Question 177:

  Which of the following federal agencies does NOT enforce the Disposal Rule under the Fair and Accurate Credit Transactions Act (FACTA)?

  A. The Office of the Comptroller of the Currency
  B. The Consumer Financial Protection Bureau
  C. The Department of Health and Human Services
  D. The Federal Trade Commission
  C. The Department of Health and Human Services

  ---

  Explanation

  https://en.wikipedia.org/wiki/Fair_and_Accurate_Credit_Transactions_Act

• Question 178:

  In March 2012, the FTC released a privacy report that outlined three core principles for companies handling consumer data. Which was NOT one of these principles?

  A. Simplifying consumer choice.
  B. Enhancing security measures.
  C. Practicing Privacy by Design.
  D. Providing greater transparency.
  B. Enhancing security measures.

  ---

  Explanation

  https://www.ftc.gov/news-events/press-releases/2012/03/ftc-issues-final-commission-report-protecting-consumer-privacy

• Question 179:

  The CFO of a pharmaceutical company is duped by a phishing email and discloses many of the company's employee personnel les to an online predator. The les include employee contact information, job applications, performance reviews, discipline records, and job descriptions.

  Which of the following state laws would be an affected employee's best recourse against the employer?

  A. The state social security number con dentiality statute.
  B. The state personnel record review statute.
  C. The state data destruction statute.
  D. The state UDAP statute.
  B. The state personnel record review statute.

  ---

  Explanation

• Question 180:

  The Cable Communications Policy Act of 1984 requires which activity?

  A. Delivery of an annual notice detailing how subscriber information is to be used
  B. Destruction of personal information a maximum of six months after it is no longer needed
  C. Notice to subscribers of any investigation involving unauthorized reception of cable services
  D. Obtaining subscriber consent for disseminating any personal information necessary to render cable services
  C. Notice to subscribers of any investigation involving unauthorized reception of cable services

  ---

  Explanation

  https://www.fcc.gov/media/engineering/cable-television