Deck 25: Privacy

Question 1

The governments in Europe and the United States have taken the same approach to controlling privacy through legislation.

Answer 1

False

Question 2

A school principle allows for student information to be accessed by a marketing company in exchange for goods and services for the school.The principle may have violated which law?

A)Privacy Act of 1974
B)FOIA
C)FERPA
D)FACTA

Answer 2

C

Question 3

Which law mandates that information that is no longer needed must be properly disposed of,either by burning,pulverizing,or shredding?

A)FCRA
B)PCI DSS
C)FACTA
D)GBLA

Answer 3

C

Question 4

Which of the following countries has a long reputation of poor privacy practices?

A)England
B)Japan
C)China
D)United States

Question 5

A privacy-enhancing technology called cookie cutter does which of the following?

A)Makes copies of your information for safe keeping
B)Makes sure when you connect to sites you use the same appropriate information
C)Prevents the transfer of cookies between browsers and web servers.
D)Is used by server to prevent the use of unnecessary cookies

Question 6

FERPA was designed to enable public access to US government records.

Question 7

Which act requires credit agencies to perform timely investigations on inaccuracies reported by consumers?

A)FCRA
B)PCI DSS
C)FACTA
D)GBLA

Question 8

A video rental store shares its customer database with a private investigator.The rental store may have violated which law?

A)COPPA
B)VPPA
C)FERPA
D)CFAA

Question 9

Privacy laws as they relate to education are very recent phenomena.

Question 10

What is the mechanism for self-regulation that can be enforced through trade practice law via the FTC called?

A)PII protection
B)Safe sailing
C)Safe Harbor
D)Harbor protection

Question 11

Which of the following is true about the Family Education Records and Privacy Act of 1974?

A)Extends the tap-and-trace provisions of existing wiretap statutes to the Internet,and mandated certain technological modifications at ISPs to facilitate electronic wiretaps on the Internet
B)Protects student records from being accessed by anyone other than the student or student's family
C)Makes it a violation of federal law to knowingly use another's identity
D)Implements the principle that a signature,contract,or other record may not be
E)Denies legal effect,validity,or enforceability solely because it is electronic form

Question 12

In the United States the primary path to privacy is _______.In Europe the primary path to privacy is _________.

A)opt-in;opt-in
B)opt-in;opt-out
C)opt-out;opt-out
D)opt-out;opt-in

Question 13

In order to identify a specific individual,the entire set of PII must be disclosed.

Question 14

Which law was designed to enable public access to US government records?

A)Privacy Act of 1974
B)FOIA
C)FERPA
D)FACTA

Question 15

The EU has developed a comprehensive concept of privacy,which is administered via a set of statutes known as what?

A)Privacy protection
B)Data protection
C)PII protection
D)ID theft protection

Question 16

The three things that should govern how good citizenry collects PII are notice,choice,and consent.

Question 17

A patient's medical records are shared with a third party who is not a medical professional and without the patient's approval.Which law may have been violated?

A)FERPA
B)FOIA
C)HIPAA
D)The Medical Records Security and Safety Act

Question 18

A structured approach to determining the gap between desired privacy performance and actual privacy performance is called

A)Personal impact assessment
B)Privacy information assessment
C)Personal privacy assessment
D)Privacy impact assessment

Question 19

Which law prohibits the collection of information from children on web sites?

A)VPPA
B)FERPA
C)COPPA
D)CFAA

Question 20

Which of the following is a standard that provides guidance on the elements of a credit card transaction that needs protection and the level of expected protection?

A)FCRA
B)PCI DSS
C)FACTA
D)GBLA

Question 21

Define privacy.

Question 22

FCRA is designed to protect educational records of students at the K-12 level.

Question 23

What are the privacy laws as they relate to computer security in various industries?

Question 24

The development of a privacy policy is an essential foundational element of a company's privacy stance.

Question 25

_______________ can be defined as the power to control what others know and what they can do with the information.

Question 26

In the United States,the primary path to privacy is via opt-out,whereas in Europe and other countries,it is via opt-in.

Question 27

_______________ is a set of elements that can lead to the specific identity of a person.

Question 28

_______________ are designed to prevent the transfer of cookies between browsers and web servers.

Question 29

A(n)_______________ is a structured approach to determining the gap between desired privacy performance and actual privacy performance.

Question 30

The _______________ was designed to enable public access to US government records,where public includes the press which acts on behalf of the public to obtain information.

Question 31

What are some web-related privacy issues?

Question 32

_______________ refers to the opportunity for the end user to consent to the data collection or to opt out.

Question 33

_______________ are small bits of text that are stored on the user's machine and sent to specific websites when the user visits.

Question 34

What are some issues associated with technology and privacy?

Question 35

What is PII as it relates to privacy?

Question 36

_______________ is designed to protect the privacy of student information

Question 37

FACTA mandates that information that is no longer needed must be properly disposed of.

Question 38

_______________ refers to the positive affirmation by a customer that she read the notice,understands her choices,and agrees to release her personal information for the purposes explained to her.

Question 39

_______________ is at the top of the list of privacy-enhancing technology (PET)for protecting privacy and anonymity.

Question 40

VPAA is considered to be the strongest US privacy law by many privacy advocates.