IAPP Certified Information Privacy Professional/United States (CIPP/US) - CIPP-US Exam Practice Test

A. The entity must have employees in the state

B. The entity must conduct business in the state

C. The entity must be registered in the state

D. The entity must be an information broker

A. The encryption of personal information stored in Massachusetts-based companies when stored on portable devices.

B. The encryption of all personal information of Massachusetts residents when all equipment is located in Massachusetts.

C. The encryption of all personal information stored in Massachusetts-based companies when all equipment is located in Massachusetts.

D. The encryption of all personal information of Massachusetts residents when stored on portable devices.

A. When the entity manages user preferences through multiple platforms

B. When the goods and services sold by its divisions are very similar

C. When the operational structures of its divisions are not transparent

D. When a call is not the result of an error or other unforeseen cause

A. To respond to police searches of newspaper facilities

B. To assist prosecutors in civil litigation against newspaper companies

C. To assist in the prosecution of white-collar crimes

D. To protect individuals from personal privacy invasion by the police

A. Money laundering information under the Bank Secrecy Act of 1970

B. Information about medication errors under the Food, Drug and Cosmetic Act

C. Information about workspace injuries under OSHA requirements

D. Personal health information under the HIPAA Privacy Rule

A. To follow the Red Flags Rule by mailing the reports to customers

B. To follow the Privacy Rule by notifying customers that the reports are being stored

C. To follow the Safeguards Rule by transferring the reports to a secure electronic file

D. To follow the Disposal Rule by having the reports shredded

A. It provides enforcement resources to large employers, but not to small businesses

B. It provides legal precedent for physical information security, but not for electronic security

C. It provides significant protections to federal and state governments, but not to private-sector employment

D. It provides contractual protections to members of labor unions, but not to employees at will

A. They require that employers provide reasonable accommodations to certain classes of employees

B. They require employers not to discriminate against certain classes when employees use personal information

C. They permit employers to use or disclose personal information specifically about employees who are members of certain classes

D. They afford certain classes of employees' privacy protection by limiting inquiries concerning their personal information