Question 1

____ is information gathered by monitoring a consumer's online activity.

Accepted Answer

Click-stream data is information gathered by monitoring a consumer's online activity, including the websites they visit, the items they click on, and the amount of time they spend on each page. Affiliate data refers to information about partnerships between businesses, while breach data refers to information that has been compromised in a security breach. Identity data refers to information about a person's personal identity, such as their name, address, and social security number.

Question 2

In Doe v. Holder, the courts ruled that the NSL gag rule (prohibits NSL recipients from informing anyone that the government has secretly requested his or her records) violates the ____.

Accepted Answer

The courts ruled that the NSL gag rule violates the First Amendment, which guarantees freedom of speech and prohibits the government from suppressing information.

Question 3

____ is one of the fastest growing forms of fraud in the United States, directly impacting over 4% of the overall U.S. adult population in 2008 with a resulting loss of $48 billion.

Accepted Answer

The statement is describing the impact of identity theft, which affects a significant percentage of the adult population and results in substantial financial losses. E-mail spam and phishing may also be forms of fraud, but they are not specifically mentioned as the fastest-growing or most impactful in this context. Cybercrime is a broader term encompassing various illegal activities in the digital realm, which may include identity theft but also many other types of offenses.

Question 4

The ____ seal program identifies online businesses that honor their own stated privacy protection policies.

Accepted Answer

The answer of The ____ seal program identifies online businesses...

Question 5

The ____ protects citizens from unreasonable government searches and is often invoked to protect the privacy of government employees.

Accepted Answer

The Fourth Amendment protects citizens from unreasonable government searches and is often invoked to protect the privacy of government employees. The USA PATRIOT Act, First Amendment, and Freedom of Information Act do not specifically address government searches or privacy.

Question 6

The 1980 privacy guidelines set by the Organisation for Economic Co-operation and Development are also known as the ____ and are often held up as the model of ethical treatment of consumer data for organizations to adopt.

Accepted Answer

The Fair Information Practices are the 1980 privacy guidelines set by the Organisation for Economic Co-operation and Development, and they are often held up as the model of ethical treatment of consumer data for organizations to adopt. The European Union Data Protection Directives, transborder data flow principles, and BBB Online data protection guidelines are all related to data privacy, but they are not specifically associated with the OECD's 1980 privacy guidelines.

Question 7

The ____ enables the public to gain access to certain government records.

Accepted Answer

The Freedom of Information Act enables the public to gain access to certain government records. The Fair Information Practices Act regulates the collection, use, and dissemination of personal information by federal agencies. The USA PATRIOT Act is primarily related to national security and surveillance measures. The Privacy Act regulates the collection, use, and dissemination of personal information by federal agencies, but has more limited provisions for public access to government records compared to the Freedom of Information Act.

Question 8

The ____ requires member countries to ensure that data transferred to non-European Union countries is protected, and bars the export of data to countries that do not have data privacy protection standards comparable to the European Union's.

Accepted Answer

The European Union Data Protection Directive requires member countries to ensure that data transferred to non-European Union countries is protected, and bars the export of data to countries that do not have data privacy protection standards comparable to the European Union's. The Fair Information Protection Act, Fair Credit Reporting Act, and Freedom of Information Act are all laws in the United States and do not pertain to data privacy in the European Union.

Question 9

Under the PATRIOT Act, the FBI can issue a ____ to compel banks, Internet service providers, and credit reporting companies to turn over information about their customers without a court order simply on the basis that information is needed for an ongoing investigation.

Accepted Answer

The FBI can issue a National Security Letter (NSL) to compel companies such as banks, Internet service providers, and credit reporting companies to turn over information about their customers without a court order under the PATRIOT Act. NSLs can be issued based on the mere assertion that the information is needed for an ongoing national security investigation.

Question 10

Under the ____, the Federal Communications Commission responded to appeals from the Justice Department by requiring providers of Internet phone services and broadband services to ensure that their equipment accommodated the use of law enforcement wiretaps.

Accepted Answer

The Communications Assistance for Law Enforcement Act (CALEA) requires providers of internet phone services and broadband services to ensure that their equipment accommodates the use of law enforcement wiretaps. The USA PATRIOT Act and Foreign Intelligence Surveillance Act both deal with surveillance and law enforcement, but they do not specifically require equipment accommodations for wiretaps. The Electronic Communications Privacy Act provides privacy protections for electronic communications but does not address wiretaps.

Question 11

The ____ prohibits the government from concealing the existence of any personal data record-keeping systems.

Accepted Answer

The Privacy Act of 1974 prohibits the government from concealing the existence of any personal data record-keeping systems. The Fair Information Practices Act does not exist; it may refer to the Fair Information Practice Principles (FIPPs). The USA PATRIOT Act is a law that expanded the government's surveillance powers, but it does not deal with record-keeping. The Freedom of Information Act provides access to federal government records, but it does not specifically address concealing the existence of record-keeping systems.

Question 12

A screening technology called ____ helps shield users from sites that do not provide the level of privacy protection they desire.

Accepted Answer

The Platform for Privacy Preferences (P3P) is a protocol allowing websites to declare their intended use of information they collect about browsing users, helping users manage their privacy preferences.

Question 13

A ____ allows the FBI to intercept any communications to or by an intelligence target without specifying the telephone line, computer, or other facility to be monitored.

Accepted Answer

A roving wiretap allows the FBI to intercept any communications to or by an intelligence target without specifying the telephone line, computer, or other facility to be monitored. A pen-register allows the FBI to collect phone numbers dialed from a particular phone line, and a trap-and-trace allows the FBI to collect information on incoming calls to a particular phone line. A search and seizure warrant allows law enforcement to search a particular location or seize specific items.

Question 14

The ____ gave sweeping new powers both to domestic law enforcement and international intelligence agencies, including increasing the ability of law enforcement agencies to search telephone, e-mail, medical, financial, and other records.

Accepted Answer

The only option that refers to giving sweeping new powers to law enforcement and intelligence agencies is the USA PATRIOT Act. The other options are either unrelated (HIPAA) or more limited in scope than what is described (Communications Assistance for Law Enforcement Act and Foreign Intelligence Surveillance Act).

Question 15

A(n) ____ terminates or repeals a law or portions of it after a specific date unless further legislative action is taken to extend the law.

Accepted Answer

A sunset provision is a legal mechanism that sets a specific expiration date for a law, unless further legislative action is taken. This means that the law or portions of it will automatically cease to be in effect after a certain date unless the legislature takes the necessary steps to extend it. This mechanism is often used to provide a temporary solution to a problem or to test the effectiveness of a law before making it permanent.

Question 16

The institution and communication of an ____ establishes boundaries of acceptable behavior and enables managers to take action against violators.

Accepted Answer

An IT usage policy outlines the acceptable use of technology and establishes boundaries to prevent inappropriate behavior. It enables management to take action against those who violate the policy. A code of ethics is a more general set of guidelines for ethical behavior and may not specifically address technology-related issues. A service level agreement and support guidelines are focused on the provision of technology services and do not typically address behavior or conduct.

Question 17

____ is keystroke-logging software downloaded to users' computers without the knowledge or consent of the user.

Accepted Answer

Spyware is a type of malicious software that secretly collects information about a computer user's activity without their knowledge or consent. One common type of spyware is keystroke-logging software, which tracks every keystroke the user makes, including sensitive information like passwords and credit card numbers. Spyware is typically downloaded to the user's computer through deceptive means, such as by disguising itself as a legitimate software update or by piggybacking on a seemingly harmless download.

Question 18

For a Web site to receive the ____ seal, its operators must demonstrate that it adheres to established privacy principles. The Web site must also agree to comply with that organization's oversight and consumer resolution process, and pay an annual fee.

Accepted Answer

The TRUSTe seal is awarded to websites that demonstrate their adherence to established privacy principles and agrees to comply with TRUSTe's oversight and consumer resolution process, and pay an annual fee. The other options may have their own criteria for certification or recognition, but do not specifically focus on privacy practices.

Question 19

____ uses business rules tied to customer-supplied preferences or online behavior to determine the most appropriate page views and product information to display when a user visits a Web site.

Accepted Answer

The description matches the definition of rules-based personalized software. Click-stream data refers to the data gathered from users' browsing behavior, spyware is a type of malicious software, and contextual commerce software deals specifically with the recommendation of products for purchase based on contextual information.

Question 20

In order to avoid Fourth Amendment issues with the use of advanced surveillance technology to track people in public places, advocates of such technology argue that people ____.

Accepted Answer

The Fourth Amendment protects individuals from unreasonable searches and seizures, but courts have generally held that people have no reasonable expectation of privacy in public places. Advocates of advanced surveillance technology argue that this lack of expectation of privacy in public places means that using such technology to track people in these areas is not a violation of their constitutional rights.

Quiz 4: Privacy