← Back to exam page

CIPP-US – Certified Information Privacy Professional/United States (CIPP/US)

Loading demo links...

Showing 7–9 of 10 questions

Question 7

More than half of U.S. states require telemarketers to?

Select an option, then click Submit answer.

  • ○

    Identify themselves at the beginning of a call
  • ○

    Obtain written consent from potential customers
  • ○

    Register with the state before conducting business
  • ○

    Provide written contracts for customer transactions
Question 8

Under the Fair Credit Reporting Act (FCRA), what must a person who is denied employment based upon his credit history receive?

Select an option, then click Submit answer.

  • ○

    A prompt notification from the employer.
  • ○

    An opportunity to reapply with the employer.
  • ○

    Information from several consumer reporting agencies (CRAs).
  • ○

    A list of rights from the Consumer Financial Protection Bureau (CFPB).
Question 9

Smith Memorial Healthcare (SMH) is a hospital network headquartered in New York and operating in 7 other states. SMH uses an electronic medical record to enter and track information about its patients.

Recently, SMH suffered a data breach where a third-party hacker was able to gain access to the SMH internal network. Because it is a HIPPA-covered entity, SMH made a notification to the Office of Civil Rights at the U.S. Department of Health and Human Services about the breach.

Which statement accurately describes SMH’s notification responsibilities?

Select an option, then click Submit answer.

  • ○

    If SMH is compliant with HIPAA, it will not have to make a separate notification to individuals in the state of New York.
  • ○

    If SMH has more than 500 patients in the state of New York, it will need to make separate notifications to these patients.
  • ○

    If SMH must make a notification in any other state in which it operates, it must also make a notification to individuals in New York.
  • ○

    If SMH makes credit monitoring available to individuals who inquire, it will not have to make a separate notification to individuals in the state of New York.