CIPP/US, CIPP/US Practice Questions, CIPP/US, CIPP US

Document Content and Description Below

CIPP/US, CIPP/US Practice Questions, CIPP/US, CIPP US In what ways can the enforcement action be brought to the FTC's attention? - ANS - 1. press reports covering the questionable practices 2. comp ... laints from consumer groups of competitors Which agency is responsible for educational privacy? - ANS - Department of Education What are some of the ways that the FTC has played a prominent role in the development of US privacy standards? - ANS - The FTC conducts public workshops on privacy issues, and reports on privacy policy and enforcement. Access - ANS - The ability to view personal information held by an organization. This may be supplemented by allowing updates or corrections to the information. U.S. laws often provide for "this" and correction when the information is used for any type of substantive decision making, such as for credit reports. Americans with Disabilities Act (ADA) - ANS - Bars discrimination against qualified individuals with disabilities; places restrictions on pre-employment medical screening. Consumer Financial Protection Bureau (CFPB) - ANS - Has enforcement power for unfair, deceptive or abusive acts and practices for financial institutions. Choice - ANS - The ability to specify whether personal information will be collected and/or how it will be used or disclosed. "It" can be express or implied. Common Law - ANS - Legal principles that have developed over time in judicial decisions (case law), often drawing on social customs and expectations. Consent Decree - ANS - A judgment entered by consent of the parties (a federal or state agency and an adverse party) whereby the defendant agrees to stop alleged illegal activity, typically without admitting guilt or wrongdoing. Consumer Reporting Agency (CRA) - ANS - Any person or entity that complies or evaluates personal information for the purpose of furnishing consumer reports to third parties for a fee. Data Breach - ANS - The intentional or unintentional release of secure information to an untrusted environment. Data Classification - ANS - Defines the clearance of individuals who can access or handle a given set of data, as well as the baseline level of protection that is appropriate for that data. Deceptive Trade Practices - ANS - Along with unfair trade practices, behavior of an organization that can be enforced against by the FTC. Defamation - ANS - Any act or communication intending to harm the reputation of another as to lower him in the estimation of the community or to deter third persons from associating or dealing with him. Electronic Discovery (e-discovery) - ANS - Discovery in civil litigation dealing with the exchange of information in electronic format, often requiring digital forensics analysis. Electronically Stored Information (ESI) - ANS - A category of information that can include email, word-processing documents, server logs, instant messaging transcripts, voicemail systems, social networking records, thumb drives, or data on SD cards. Equal Employment Opportunity Commission (EEOC) - ANS - A federal agency overseeing many laws preventing discrimination in the workplace, include Title VII of the Civil Rights Act, the Age Discrimination in Employment Act of 1967 (ADEA) and Titles I and V of the Americans with Disabilities Act of 1990 (ADA). Evidentiary Privilege - ANS - Privileges limiting or prohibiting disclosure of personal information in the context of investigations and litigation, such as attorney-client privilege. Fair Credit Reporting Act (FCRA) - ANS - Enacted in 1970 to regulate the consumer reporting industry and provide privacy rights in consumer reports. "This" mandates accurate and relevant data collection, provides consumers with the ability to access and correct their information, and limits the use of consumer reports to defined permissible purposes. Federal Trade Commission (FTC) - ANS - An independent consumer protection agency governed by a chairman and four other commissioners with the authority to enforce against unfair and deceptive trade practices. Global Privacy Enforcement Network (GPEN) - ANS - Established in 2010 by the FTC and enforcement authorities from around the world, "it" aims to promote cross-border information sharing as well as investigation and enforcement cooperation among privacy authorities around the world. Gramm-Leach Bliley Act (GLBA) - ANS - Alo known as the Financial Services Modernization Act of 1999, "this" is a United States federal law to control the ways that financial institutions deal with the private information of individuals. Health Information - ANS - Any information related to the past, present or future physical or mental condition, provision of health care or payment for health care for a specific individual. Health Insurance Portability and Accountability Act of 1996 (HIPAA) - ANS - A U.S. law passed to create national standards for electronic healthcare transactions, among other purposes. Requires the U.S. Department of Health and Human Services to promulgate regulations to protect the privacy and security of personal health information. The basic rule is that patients have to opt-in before their information can be shared with other organizations - although there are important exceptions such for treatment, payment and healthcare operations. National Labor Relations Board (NLRB) - ANS - An independent agency of the United States government responsible for investigating and remedying unfair labor practices. National Security Letter (NSL) - ANS - A category of subpoena generally issued to seek records considered relevant to protect against international terrorism or clandestine intelligence activities. Negligence - ANS - The failure to exercise the care that a reasonably prudent person would exercise in like circumstances, leading to unintended harm. Notice - ANS - A description of an organization's information management practices, with the purposes of consumer education and corporate accountability. Organisation for Economic Co-operation and Development (OECD) - ANS - A multinational organization with the goal of creating policies that contribute to the economic, environmental, and social well-being of its member countries. Personal Health Information (PHI) - ANS - Any individually indentifiable health information with data elements which could reasonably be expected to allow individual identification. Personal Health Record (PHR) - ANS - A record maintained by the patient to track health and medical care information across a duration of time. Preemption - ANS - The ability for one government's laws to supersede those of another, such as federal law overriding individual state law. Privacy Notice - ANS - An external communication from an organization to consumers, customers or users to describe an organization's privacy practices. Privacy Policy - ANS - An internal standards document to describe an organization's privacy practices. Private Right of Action - ANS - The ability of an individual harmed by a violation of law to bring suit against the violator. Privilege - ANS - A rule of evidence that protects confidential information communicated between a client and legal advisor [Show More]

Last updated: 3 years ago

Preview 1 out of 210 pages