CSC - Cybersecurity Compliance Data Privacy and Breach Notification Laws Questions and Answers Flashcards

Which U.S. federal law requires financial institutions to protect consumers' personal financial information and notify customers of privacy policies?

Answer: Gramm-Leach-Bliley Act (GLBA)

The Gramm-Leach-Bliley Act (GLBA) requires financial institutions to explain data sharing practices and protect consumers' nonpublic personal information.

Under the California Consumer Privacy Act (CCPA), what right allows consumers to request that a business delete their personal information?

Answer: Right to deletion

The CCPA's right to deletion (also called the right to erasure) allows California consumers to request that businesses delete personal information collected about them.

Which federal law protects the privacy of students' educational records and applies to schools receiving federal funding?

Answer: FERPA

The Family Educational Rights and Privacy Act (FERPA) gives parents and eligible students control over educational records and restricts their disclosure.

Which U.S. law restricts the online collection of personal information from children under 13 years old?

Answer: COPPA

The Children's Online Privacy Protection Act (COPPA) requires verifiable parental consent before collecting personal data from children under 13.

What is the primary federal agency responsible for enforcing data privacy and consumer protection laws in the United States?

Answer: Federal Trade Commission (FTC)

The FTC enforces federal consumer protection laws, including actions against unfair or deceptive data privacy practices under Section 5 of the FTC Act.

Which U.S. state first enacted a comprehensive consumer data privacy law modeled partly on GDPR principles, effective January 1, 2020?

Answer: California (CCPA)

California's Consumer Privacy Act (CCPA) took effect January 1, 2020, and was the first broad U.S. state privacy law granting consumers rights over their personal data.