Free CIPP-US Exam braindumps download (CIPP-US exam dumps Free)

QUESTION: 106

Smith Memorial Healthcare (SMH) is a hospital network headquartered in New York and operating in 7 other states. SMH uses an electronic medical record to enter and track information about its patients. Recently, SMH suffered a data breach where a third-party hacker was able to gain access to the SMH internal network. Because it is a HIPPA-covered entity, SMH made a notification to the Office of Civil Rights at the U.S.
Department of Health and Human Services about the breach.

Which statement accurately describes SMH's notification responsibilities?

If SMH is compliant with HIPAA, it will not have to make a separate notification to individuals in the state of New York.
If SMH has more than 500 patients in the state of New York, it will need to make separate notifications to these patients.
If SMH must make a notification in any other state in which it operates, it must also make a notification to individuals in New York.
If SMH makes credit monitoring available to individuals who inquire, it will not have to make a separate notification to individuals in the state of New York.

Answer(s): A

Show Answer Next Question

QUESTION: 107

Sarah lives in San Francisco, California. Based on a dramatic increase in unsolicited commercial emails, Sarah believes that a major social media platform with over 50 million users has collected a lot of personal information about her. The company that runs the platform is based in New York and France.

Why is Sarah entitled to ask the social media platform to delete the personal information they have collected about her?

Any company with a presence in Europe must comply with the General Data Protection Regulation globally, including in response to data subject deletion requests.
Under Section 5 of the FTC Act, the Federal Trade Commission has held that refusing to delete an individual's personal information upon request constitutes an unfair practice.
The California Consumer Privacy Act entitles Sarah to request deletion of her personal information.
The New York "Stop Hacks and Improve Electronic Data Security" (SHIELD) Act requires that businesses under New York's jurisdiction must delete customers' personal information upon request.

Answer(s): C

Reference:

https://www.varonis.com/blog/ccpa-vs-gdpr/

Show Answer Next Question

QUESTION: 108

Which of the following is an example of federal preemption?

The Payment Card Industry's (PCI) ability to self-regulate and enforce data security standards for payment card data.
The U.S. Federal Trade Commission's (FTC) ability to enforce against unfair and deceptive trade practices across sectors and industries.
The California Consumer Privacy Act (CCPA) regulating businesses that have no physical brick-and-mortal presence in California, but which do business there.
The U.S. Controlling the Assault of Non-Solicited Pornography and Marketing (CAN-SPAM) Act prohibiting states from passing laws that impose greater obligations on senders of email marketing.

Answer(s): D

Show Answer Next Question

QUESTION: 109

Which of these organizations would be required to provide its customers with an annual privacy notice?

The Four Winds Tribal College.
The Golden Gavel Auction House.
The King County Savings and Loan.
The Breezy City Housing Commission.

Answer(s): C

Show Answer Next Question

QUESTION: 110

Which entity within the Department of Health and Human Services (HHS) is the primary enforcer of the Health Insurance Portability and Accountability Act (HIPAA) "Privacy Rule"?

Office for Civil Rights.
Office of Social Services.
Office of Inspector General.
Office of Public Health and Safety.

Answer(s): A

Reference:

https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/examples/how-ocr-enforces- the-hipaa-privacy-and-security-rules/index.html

Show Answer Next Question

Free CIPP-US Exam Braindumps Certified Information Privacy Professional/United States (CIPP/US) Questions 106–110 (page: 23)

QUESTION: 106

QUESTION: 107

Reference:

QUESTION: 108

QUESTION: 109

QUESTION: 110

Reference:

Free CIPP-US Exam Braindumps
Certified Information Privacy Professional/United States (CIPP/US) Questions 106–110 (page: 23)