Free CIPP-US Exam Braindumps
Certified Information Privacy Professional/United States (CIPP/US) Questions 86–90 (page: 19)

Updated On: 10-Feb-2026

More than half of U.S. states require telemarketers to do which of the following?

  1. Identify themselves at the beginning of a call
  2. Obtain written consent from potential customers
  3. Register with the state before conducting business
  4. Provide written contracts for customer transactions

Answer(s): C



What does the Massachusetts Personal Information Security Regulation require as it relates to encryption of personal information?

  1. The encryption of all personal information of Massachusetts residents when all equipment is located in Massachusetts.
  2. The encryption of all personal information stored in Massachusetts-based companies when all equipment is located in Massachusetts.
  3. The encryption of personal information stored in Massachusetts-based companies when stored on portable devices.
  4. The encryption of all personal information of Massachusetts residents when stored on portable devices.

Answer(s): D


Reference:

https://www.dataguidance.com/notes/massachusetts-data-protection-overview



California's SB 1386 was the first law of its type in the United States to do what?

  1. Require commercial entities to disclose a security data breach concerning personal information about the state's residents
  2. Require notification of non-California residents of a breach that occurred in California
  3. Require encryption of sensitive information stored on servers that are Internet connected
  4. Require state attorney general enforcement of federal regulations against unfair and deceptive trade practices

Answer(s): A


Reference:

https://corporate.findlaw.com/law-library/california-raises-the-bar-on-data-security-and-privacy.html



Most states with data breach notification laws indicate that notice to affected individuals must be sent in the "most expeditious time possible without unreasonable delay." By contrast, which of the following states currently imposes a definite limit for notification to affected individuals?

  1. Maine
  2. Florida
  3. New York
  4. California

Answer(s): B


Reference:

https://www.itgovernanceusa.com/data-breach-notification-laws



Under state breach notification laws, which is NOT typically included in the definition of personal information?

  1. State identification number
  2. First and last name
  3. Social Security number
  4. Medical Information

Answer(s): D


Reference:

https://www.ncsl.org/research/telecommunications-and-information-technology/security-breach- notification-laws.aspx



Viewing page 19 of 52
Viewing questions 91 - 95 out of 283 questions


Post your Comments and Discuss IAPP CIPP-US exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!