Which of the following federal agencies does NOT enforce the Disposal Rule under the Fair and Accurate Credit Transactions Act (FACTA)?

Which of the following federal agencies does NOT enforce the Disposal Rule under the Fair and Accurate Credit Transactions Act (FACTA)?A . The Office of the Comptroller of the CurrencyB . The Consumer Financial Protection BureauC . The Department of Health and Human ServicesD . The Federal Trade Commission View Answer Answer: C Explanation:...

Continue reading

What is the most significant reason that the U.S. Department of Health and Human Services (HHS) might impose a penalty on HealthCo?

SCENARIO Please use the following to answer the next QUESTION: You are the chief privacy officer at HealthCo, a major hospital in a large U.S. city in state A. HealthCo is a HIPAA-covered entity that provides healthcare services to more than 100,000 patients. A third-party cloud computing service provider, CloudHealth, stores and manages the...

Continue reading

If an organization maintains data classified as high sensitivity in the same system as data classified as low sensitivity, which of the following is the most likely outcome?

If an organization maintains data classified as high sensitivity in the same system as data classified as low sensitivity, which of the following is the most likely outcome?A . The organization will still be in compliance with most sector-specific privacy and security laws.B . The impact of an organizational data breach will be more...

Continue reading

Based on the problems with the company’s privacy security that Roberta identifies, what is the most likely cause of the breach?

SCENARIO Please use the following to answer the next QUESTION When there was a data breach involving customer personal and financial information at a large retail store, the company’s directors were shocked. However, Roberta, a privacy analyst at the company and a victim of identity theft herself, was not. Prior to the breach, she...

Continue reading

What is the most likely reason that states have adopted their own data breach notification laws?

What is the most likely reason that states have adopted their own data breach notification laws?A . Many states have unique types of businesses that require specific legislationB . Many lawmakers believe that federal enforcement of current laws has not been effectiveC . Many types of organizations are not currently subject to federal laws...

Continue reading