Which action is prohibited under the Electronic Communications Privacy Act of 1986?

• A.Intercepting electronic communications and unauthorized access to stored communications
• B.Monitoring employee telephone calls of a personal nature
• C.Monitoring all employee telephone calls
• D.Accessing stored communications with the consent of the sender or recipient of the message

Comment: *

Name: *

Email: *

Verification: *

SCENARIO
Please use the following to answer the next QUESTION:
A US-based startup company is selling a new gaming application. One day, the CEO of the company receives an urgent letter from a prominent EU-based retail partner. Triggered by an unresolved complaint lodged by an EU resident, the letter describes an ongoing investigation by a supervisory authority into the retailer's data handling practices.
The complainant accuses the retailer of improperly disclosing her personal data, without consent, to parties in the United States. Further, the complainant accuses the EU-based retailer of failing to respond to her withdrawal of consent and request for erasure of her personal data. Your organization, the US-based startup company, was never informed of this request for erasure by the EU-based retail partner. The supervisory authority investigating the complaint has threatened the suspension of data flows if the parties involved do not cooperate with the investigation. The letter closes with an urgent request: "Please act immediately by identifying all personal data received from our company." This is an important partnership. Company executives know that its biggest fans come from Western Europe; and this retailer is primarily responsible for the startup's rapid market penetration.
As the Company's data privacy leader, you are sensitive to the criticality of the relationship with the retailer.
Under the GDPR, the complainant's request regarding her personal information is known as what?

• A.Right of Access
• B.Right of Removal
• C.Right of Rectification
• D.Right to Be Forgotten

Comment: *

Name: *

Email: *

Verification: *

If an organization maintains data classified as high sensitivity in the same system as data classified as low sensitivity, which of the following is the most likely outcome?

• A.The impact of an organizational data breach will be more severe than if the data had been segregated.
• B.Temporary employees will be able to find the data necessary to fulfill their responsibilities.
• C.The organization will be able to address legal discovery requests efficiently without producing more information than necessary.
• D.The organization will still be in compliance with most sector-specific privacy and security laws.

Comment: *

Name: *

Email: *

Verification: *

How did the Fair and Accurate Credit Transactions Act (FACTA) amend the Fair Credit Reporting Act (FCRA)?

• A.It expanded the definition of "consumer reports" to include communications relating to employee investigations
• B.It increased the obligation of organizations to dispose of consumer data in ways that prevent unauthorized access
• C.It stipulated the purpose of obtaining a consumer report can only be for a review of the employee's credit worthiness
• D.It required employers to get an employee's consent in advance of requesting a consumer report for internal investigation purposes

Comment: *

Name: *

Email: *

Verification: *

Sarah lives in San Francisco, California. Based on a dramatic increase in unsolicited commercial emails, Sarah believes that a major social media platform with over 50 million users has collected a lot of personal information about her. The company that runs the platform is based in New York and France.
Why is Sarah entitled to ask the social media platform to delete the personal information they have collected about her?

• A.Any company with a presence in Europe must comply with the General Data Protection Regulation globally, including in response to data subject deletion requests.
• B.Under Section 5 of the FTC Act, the Federal Trade Commission has held that refusing to delete an individual's personal information upon request constitutes an unfair practice.
• C.The California Consumer Privacy Act entitles Sarah to request deletion of her personal information.
• D.The New York "Stop Hacks and Improve Electronic Data Security" (SHIELD) Act requires that businesses under New York's jurisdiction must delete customers' personal information upon request.

Comment: *

Name: *

Email: *

Verification: *