support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. IAPP
  4. CIPP-C

Free CIPP-C Exam Braindumps
Certified Information Privacy Professional/ Canada (CIPP/C) Questions 36–40 (page: 9)

Updated On: 9-Feb-2026
Page 9 of 31
PDF with 150 Questions

A covered entity suffers a ransomware attack that affects the personal health information (PHI) of more than 500 individuals. According to Federal law under HIPAA, which of the following would the covered entity NOT have to report the breach to?

  1. Department of Health and Human Services
  2. The affected individuals
  3. The local media
  4. Medical providers

Answer(s): D


Reference:

https://www.hhs.gov/sites/default/files/RansomwareFactSheet.pdf (page 6)



What consumer protection did the Fair and Accurate Credit Transactions Act (FACTA) require?

  1. The ability for the consumer to correct inaccurate credit report information
  2. The truncation of account numbers on credit card receipts
  3. The right to request removal from e-mail lists
  4. Consumer notice when third-party data is used to make an adverse decision

Answer(s): A


Reference:

https://www.investopedia.com/terms/f/facta.asp



Who has rulemaking authority for the Fair Credit Reporting Act (FCRA) and the Fair and Accurate Credit Transactions Act (FACTA)?

  1. State Attorneys General
  2. The Federal Trade Commission
  3. The Department of Commerce
  4. The Consumer Financial Protection Bureau

Answer(s): D


Reference:

https://www.ftc.gov/enforcement/statutes/fair-accurate-credit-transactions-act-2003



Under the Fair and Accurate Credit Transactions Act (FACTA), what is the most appropriate action for a car dealer holding a paper folder of customer credit reports?

  1. To follow the Disposal Rule by having the reports shredded
  2. To follow the Red Flags Rule by mailing the reports to customers
  3. To follow the Privacy Rule by notifying customers that the reports are being stored
  4. To follow the Safeguards Rule by transferring the reports to a secure electronic file

Answer(s): C



When may a financial institution share consumer information with non-affiliated third parties for marketing purposes?

  1. After disclosing information-sharing practices to customers and after giving them an opportunity to opt in.
  2. After disclosing marketing practices to customers and after giving them an opportunity to opt in.
  3. After disclosing information-sharing practices to customers and after giving them an opportunity to opt out.
  4. After disclosing marketing practices to customers and after giving them an opportunity to opt out.

Answer(s): C


Reference:

https://www.ftc.gov/tips-advice/business-center/guidance/how-comply-privacy- consumer-financial- information-rule-gramm



  PDF
Viewing page 9 of 31
Viewing questions 41 - 45 out of 150 questions


Post your Comments and Discuss IAPP CIPP-C exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!