CIPP-US Exam
Questions and Complete
Solutions Graded A+
Access - Answer: The ability to view personal information held by an organization. This may be
supplemented by allowing updates or corrections to the information. U.S. laws often provide for access
and correction when the information is used for any type of substantive decision making, such as for
credit reports.
Americans with Disabilities Act (ADA) - Answer: Bars discrimination against qualified individuals with
disabilities; places restrictions on pre-employment medical screening.
Consumer Financial Protection Bureau (CFPB) - Answer: Has enforcement power for unfair, deceptive or
abusive acts and practices for financial institutions.
Choice - Answer: The ability to specify whether personal information will be collected and/or how it will
be used or disclosed. Choice can be express or implied.
Common Law - Answer: Legal principles that have developed over time in judicial decisions (case law),
often drawing on social customs and expectations.
Consent Decree - Answer: A judgment entered by consent of the parties (a federal or state agency and
an adverse party) whereby the defendant agrees to stop alleged illegal activity, typically without
admitting guilt or wrongdoing.
Consumer Reporting Agency (CRA) - Answer: Any person or entity that complies or evaluates personal
information for the purpose of furnishing consumer reports to third parties for a fee.
Data Breach - Answer: The intentional or unintentional release of secure information to an untrusted
environment.
,Data Classification - Answer: Defines the clearance of individuals who can access or handle a given set of
data, as well as the baseline level of protection that is appropriate for that data.
Deceptive Trade Practices - Answer: Along with unfair trade practices, behavior of an organization that
can be enforced against by the FTC.
Defamation - Answer: Any act or communication intending to harm the reputation of another as to
lower him in the estimation of the community or to deter third persons from associating or dealing with
him.
Electronic Discovery (e-discovery) - Answer: Discovery in civil litigation dealing with the exchange of
information in electronic format, often requiring digital forensics analysis.
Electronically Stored Information (ESI) - Answer: A category of information that can include e-mail,
word-processing documents, server logs, instant messaging transcripts, voicemail systems, social
networking records, thumb drives, or data on SD cards.
Equal Employment Opportunity Commission (EEOC) - Answer: A federal agency overseeing many laws
preventing discrimination in the workplace, include Title VII of the Civil Rights Act, the Age
Discrimination in Employment Act of 1967 (ADEA) and Titles I and V of the Americans with Disabilities
Act of 1990 (ADA).
Evidentiary Privilege - Answer: Privileges limiting or prohibiting disclosure of personal information in the
context of investigations and litigation, such as attorney-client privilege.
Fair Credit Reporting Act (FCRA) - Answer: Enacted in 1970 to regulate the consumer reporting industry
and provide privacy rights in consumer reports, FCRA mandates accurate and relevant data collection,
provides consumers with the ability to access and correct their information, and limits the use of
consumer reports to defined permissible purposes.
Federal Trade Commission (FTC) - Answer: An independent consumer protection agency governed by a
chairman and four other commissioners with the authority to enforce against unfair and deceptive trade
practices.
, Global Privacy Enforcement Network (GPEN) - Answer: Established in 2010 by the FTC and enforcement
authorities from around the world, the GPEN aims to promote cross-border information sharing as well
as investigation and enforcement cooperation among privacy authorities around the world.
Gramm-Leach Bliley Act (GLBA) - Answer: Alo known as the Financial Services Modernization Act of
1999, GLBA is a United States federal law to control the ways that financial institutions deal with the
private information of individuals.
Health Information - Answer: Any information related to the past, present or future physical or mental
condition, provision of health care or payment for health care for a specific individual.
Health Insurance Portability and Accountability Act of 1996 (HIPAA) - Answer: A U.S. law passed to
create national standards for electronic healthcare transactions, among other purposes. HIPAA required
the U.S. Department of Health and Human Services to promulgate regulations to protect the privacy and
security of personal health information. The basic rule is that patients have to opt-in before their
information can be shared with other organizations - although there are important exceptions such for
treatment, payment and healthcare operations.
National Labor Relations Board (NLRB) - Answer: An independent agency of the United States
government responsible for investigating and remedying unfair labor practices.
National Security Letter (NSL) - Answer: A category of subpoena generally issued to seek records
considered relevant to protect against international terrorism or clandestine intelligence activities.
Negligence - Answer: The failure to exercise the care that a reasonably prudent person would exercise in
like circumstances, leading to unintended harm.
Notice - Answer: A description of an organization's information management practices, with the
purposes of consumer education and corporate accountability.
Organisation for Economic Co-operation and Development (OECD) - Answer: A multinational
organization with the goal of creating policies that contribute to the economic, environmental, and
social well-being of its member countries.
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller YourExamplug. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $14.49. You're not tied to anything after your purchase.