According to the FTC Report of 2012, what is the main goal of Privacy by Design?

• A.Incorporating privacy protections throughout the development process
• B.Implementing a system of standardization for privacy notices
• C.Establishing a system of self-regulatory codes for mobile-related services
• D.Obtaining consumer consent when collecting sensitive data for certain purposes

Comment: *

Name: *

Email: *

Verification: *

All of the following are tasks in the "Discover" phase of building an information management program EXCEPT?

• A.Developing a process for review and update of privacy policies
• B.Facilitating participation across departments and levels
• C.Understanding the laws that regulate a company's collection of information
• D.Deciding how aggressive to be in the use of personal information

Comment: *

Name: *

Email: *

Verification: *

Which of the following accurately describes the purpose of a particular federal enforcement agency?

• A.The Federal Trade Commission (FTC) is typically recognized as having the broadest authority under the FTC Act to address unfair or deceptive privacy practices.
• B.The Cybersecurity and Infrastructure Security Agency (CISA) is authorized to bring civil enforcement actions against organizations whose website or other online service fails to adequately secure personal information.
• C.The Federal Communications Commission (FCC) regulates privacy practices on the internet and enforces violations relating to websites' posted privacy disclosures.
• D.The National Institute of Standards and Technology (NIST) has established mandatory privacy standards that can then be enforced against all for-profit organizations by the Department of Justice (DOJ).

Comment: *

Name: *

Email: *

Verification: *

In what way does the "Red Flags Rule" under the Fair and Accurate Credit Transactions Act (FACTA) relate to the owner of a grocery store who uses a money wire service?

• A.It does not apply because the owner is not a creditor
• B.It mandates the use of updated technology for securing credit records
• C.It is not usually enforced in the case of a small financial institution
• D.It requires the owner to implement an identity theft warning system

Comment: *

Name: *

Email: *

Verification: *

Which of the following is one of the supervisory authority's investigative powers?

• A.To require that controllers or processors adopt approved data protection certification mechanisms.
• B.To determine whether a controller or processor has the right to a judicial remedy concerning a compensation decision made against them.
• C.To require data controllers to provide them with written notification of all new processing activities.
• D.To notify the controller or the processor of an alleged infringement of the GDPR.

Comment: *

Name: *

Email: *

Verification: *