Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
Cyber Priv FA2
| Question | Answer |
|---|---|
| What is the maximum penalty for HIPAA violations per violation? | $50,000 |
| Which HIPAA safeguard prevents unauthorized entry into data centers? | Physical |
| Which CCPA requirement demands companies disclose purposes of data use? | Data Disclosure |
| A Philippine telco collects location data for marketing without consent. This complies with DPA 2012. | False |
| Which law mandates breach reporting both to regulators and individuals? | GDPR |
| A bank shares PHI without patient consent under HIPAA. This is lawful. | False |
| A Philippine government agency discloses citizen data to third parties without consent. This violates DPA 2012. | True |
| Which is a data localization example? | Russia mandating citizen data stored domestically |
| A company hides a cyber breach from customers to avoid reputational damage. This complies with GDPR. | False |
| Which Philippine violation is committed when an employee sells patient data? | Unauthorized Purpose |
| Which are obligations under HIPAA? | Protect PHI Implement safeguards Provide breach notificati |
| Which HIPAA requirement ensures breach notification to affected individuals? | Breach Notification Rule |
| Which is an adequacy mechanism under GDPR? | Adequacy Decision by EU Commission |
| A business processing fewer than 50,000 California users’ data is exempt from CCPA. | True |
| Which of the following is NOT a key GDPR principle? | Profit Maximization |
| Which are key principles of data protection regulations? | Lawfulness, Fairness, Transparency Data Minimization Purpose Limitation |
| Which right is explicitly given to California residents under CCPA? | Right to Know what personal data is collected |
| Which law applies to California companies with $25M+ revenue or 50K+ consumer data? | CCPA |
| A company continues to process EU customer data after consent is withdrawn. This complies with GDPR. | False |
| Which of the following does HIPAA cover? | Healthcare providers |
| A company must disclose the purpose for which it collects data under CCPA. | True |
| Which principle emphasizes that personal data must be processed fairly, lawfully, and transparently? | Lawfulness, Fairness, Transparency |
| Which GDPR article outlines data breach notification? | Article 33 |
| Which law grants the right to file legal action after a data breach? | CCPA |
| Which GDPR right allows individuals to object to processing for marketing? | Right to Object |
| Which are rights under GDPR? | Rectification Access Erasure |
| The “Do Not Sell My Personal Information” link is required under: | CCPA |
| Under GDPR, consent must be freely given, specific, and informed. | True |
| Which of the following is a HIPAA enforcement mechanism? | Office for Civil Rights (OCR) |
| Which Philippine DPA violation occurs when ex-employees leak data in bad faith? | Malicious Disclosure |
| A company deletes inaccurate personal data upon user request. This aligns with GDPR. | True |
| Which law sets penalties up to €20M or 4% turnover? | GDPR |
| A U.S. company selling to EU customers must comply with GDPR, even if not based in Europe. | True |
| Which GDPR right is also mirrored in DPA 2012? | Right to Access |
| Which GDPR principle requires businesses to prove compliance? | Accountability |
| Which is a key consumer right under GDPR? | Right to data portability |
| Which of the following does NOT fall under GDPR scope? | Local clubs with no personal data |
| A healthcare provider uses strong encryption and access control to protect patient records. This aligns with HIPAA safeguards. | True |
| An EU company transfers data to a country with no adequacy decision and no SCCs. This complies with GDPR. | False |
| Which right under GDPR lets individuals transfer data between providers? | Right to Portability |
| An e-commerce firm fails to display a “Do Not Sell My Personal Information” link for California users. This violates CCPA. | True |
| Under GDPR, data breach notification to the supervisory authority must occur within: | 72 hours |
| Which cross-border mechanism applies in absence of adequacy decisions? | Standard Contractual Clauses (SCCs) |
| A U.S. hospital fails to provide patients with a copy of their medical records. This violates HIPAA. | True |
| Which mechanisms protect EU citizens’ data transferred overseas? | SCCs, Adequacy Decisions, and BCRs |
| Which GDPR principle ensures data is accurate and kept up to date? | Accuracy |
| Which organization enforces the Data Privacy Act of 2012 in the Philippines? | National Privacy Commission (NPC) |
Created by:
jxxnixx