Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Reviewer > Chapter 5 > Flashcards

Chapter 5 Flashcards

1
Q
  • Telecommunications operators
  • Internet firms
  • Financial institutions that provide online services (e.g., banking institutions, insurance companies, securities companies, and foundations)
  • Cybersecurity product and/or service providers
  • Enterprises that have websites and provide network services
A

Network operators examples

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Issued warnings, confiscated illegal income, and penalties of up to RMB one million (about $152,000 USD)

A

Failure to comply with the Cybersecurity Law

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Approach to privacy protection, particularly in the private sector, is significantly different from the approach taken in Europe and in Canada

A

The United States

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

The only national privacy policies to survive congressional debate have passed into law on a case-by-case basis

A

Sectorial approach to privacy law

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Requires accurate and relevant data collection by entities that compile CONSUMER REPORTS as well as persons who use consumer reports

A

Fair Credit Reporting Act (FCRA)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

It gives consumers the ability to access and correct their information and limits the use of consumer reports to permissible purposes

A

Fair Credit Reporting Act (FCRA)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

FCRA stands for:

A

Fair Credit Reporting Act

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Factors in establishing a consumer’s eligibility for credit, insurance, employment or other business purpose

A

Purpose of consumer report

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

any information that pertains to:
1. creditworthiness
2. credit standing
3. credit capacity
4. character
5. general reputation
6. personal characteristics
7. mode of living

and that is used or expected to be used or collected in whole or in part for the purpose of serving as a factor in establishing a consumer’s eligibility for credit, insurance, employment or other business purpose

A

Consumer report

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Any entity that routinely furnishes consumer reports to third parties for a fee

A

consumer reporting agency (CRA)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

CRA stands for:

A

consumer reporting agency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q
  1. Provide consumers with access to the information contained in their consumer reports, along with the opportunity to dispute any inaccurate information.
  2. Take reasonable steps to ensure the accuracy of information in the consumer report.
  3. Not report negative information that is outdated. In most cases, this means account data more than seven years old or bankruptcies more than 10 years old.
  4. Provide consumer reports only to entities that have a permissible purpose under the FCRA.
  5. Maintain records regarding entities that received consumer reports and provide consumer assistance as required by Federal Trade Commission (FTC) rules.
A

CRA Requirements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Account data more than 7 years old or bankruptcies more than 10 years old

A

Outdated negative report according to FCRA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q
  1. Have a permissible purpose as prescribed by the law
  2. Provide certifications to the CRA that they are accessing the report for a permitted purpose
  3. Notify consumers when adverse actions are taken and limit the types of adverse actions that can be taken as a result of obtaining or reviewing the information contained within a consumer credit report
A

Users of credit report requirements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

All business, credit, and employment actions affecting consumers that can be considered to have a negative impact as defined, such as denying or canceling credit or insurance, or denying employment or promotion

A

Adverse action

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Civil and criminal penalties that include significant statutory damages

A

Noncompliance to FCRA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

FTC and state attorneys general

A

Enforce violations of FCRA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

HIPAA stands for:

A

Health Insurance Portability and Accountability Act

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

U.S. law that specifically addresses health information privacy

A

HIPAA (Health Insurance Portability and Accountability Act)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

US national standards for electronic healthcare information transactions

A

HIPAA rules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q
  1. privacy
  2. security
  3. transactions
A

3 subsets of HIPAA rules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Minimum standards

A

HIPAA privacy and security rules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Any information that identifies, or reasonably could be used to identify, an individual and that relates to the past, present, or future physical or mental health or condition of an individual; the provision of healthcare to an individual; or the past, present, or future payment for the provision of healthcare to that individual

A

personal health information (US)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q
  1. Healthcare providers (e.g., a hospital)
  2. Health plans (a specific program offered by an insurer or other provider)
  3. Healthcare clearinghouses (third - party organizations that host, handle or process medical information)
A

Entities that are directly covered under HIPAA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

“Business associates” and any other entity that uses or discloses personal health information

A

Entities that are indirectly covered under HIPAA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

HHS and state attorneys general

A

Enforces HIPAA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Both civil and criminal penalties with significant fines and potential prison sentences

A

HIPAA penalties

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

GLBA stands for:

A

Gramm-Leach-Bliley Act

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

To address all sorts of issues regarding mergers and to provide significant privacy and security protections for consumers

A

GLBA (Gramm-Leach-Bliley Act)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

GLBA protects this information.

It is personally identifiable financial information that is
(1) provided by a consumer to a financial institution
(2) resulting from a transaction or service performed for the consumer, or
(3) otherwise obtained by the financial institution

A

nonpublic financial information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

US domestic financial institutions, defined to include any U.S. company that is “significantly engaged” in financial activities

A

Application of GLBA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

A.K.A. Financial Services Modernization Act of 1999

A

GLBA (Gramm-Leach-Bliley Act)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Publicly available information and any consumer list that is derived without using personally identifiable financial information

A

Excluded from nonpublic financial information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q
  1. Securely store personal financial information
  2. Give notice of policies regarding the sharing of personal financial information
  3. Give consumers the alternative to opt out of some sharing of personal financial information
A

GLBA (Gramm-Leach-Bliley Act) basic requirements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q
  1. Prepare and provide to customers clear and conspicuous notice of the financial institution’s information-sharing policies and practices. These notices must be given when a customer relationship is established and annually thereafter.
  2. Clearly provide consumers the right to opt out of having their nonpublic personal information shared with nonaffiliated third parties (subject to a number of significant exceptions related largely to the processing of consumer transactions)
A

Under GLBA, U.S.-based financial institutions are required to:

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

FTC and state attorneys general

A

Enforce GLBA (Gramm-Leach-Bliley Act)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

COPPA stands for

A

Children’s Online Privacy Protection Act of 2000

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Operators of commercial websites and online services (especially those directed to children under the age of 13), general-audience websites and online services if they have actual knowledge that they are collecting personal information from children under the age of 13

A

COPPA applies to:

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q
  1. Post a privacy policy on the site’s homepage and link to the privacy policy on every page where personal information is collected
  2. Provide notice about the site’s information collection practices to parents
  3. Obtain verifiable parental consent before collecting personal information from children
  4. Give parents a choice as to whether their child’s personal information will be disclosed to third parties
  5. Provide parents access and the opportunity to delete the child’s personal information and to opt out of future collection or use of the information
  6. Not condition a child’s participation in a game, contest or other activity on the child’s disclosure of more personal information than is reasonably necessary to participate in that activity
  7. Maintain the confidentiality, security and integrity of personal information collected from children
A

COPPA requirements

40
Q

FTC and state attorneys general

A

Enforce COPPA

41
Q

These US laws relate to specific communications channels and methods such as telemarketing, electronic mail, and fax marketing

A

U.S. Marketing Communications Laws

42
Q

Regards to the major contrast between U.S. and international approaches to marketing communications

A

Choice

43
Q

Where do laws generally require the consumer to opt in to marketing programs?

A

EU and Canada

44
Q

Where do laws generally require the consumer to opt out of marketing programs?

A

US

45
Q

Apply to for-profit organizations and cover charitable solicitations placed by for-profit telefunders

A

U.S. Telemarketing Sales Rules (TSR)

46
Q
  • Call only between 8 a.m. and 9 p.m.
  • Screen and scrub names against the Do Not Call list (DNC)
  • Display caller ID information
  • Identify themselves and what they are selling
  • Disclose all material information and terms
  • Comply with special rules for prizes and promotions
  • Respect requests to call back
  • Retain records for at least 24 hours
  • Comply with special rules for automated dialers
A

U.S. Telemarketing Sales Rules (TSR) requirements:

47
Q

A means for U.S. citizens to register residential and wireless phone numbers that they do not wish to be called for telemarketing purposes

*** Rose from TSR

A

National Do Not Call Registry

48
Q

The list and the rules and exceptions associated with Do Not Call list for Canadians fall under

A

Canadian Radio-television and Telecommunications Commission (CRTC)

49
Q

TCPA stands for:

A

Telephone Consumer Protection Act

50
Q

It regulates telemarketing calls, autodialed calls, prerecorded calls, text messages, unsolicited faxes, and so

A

Telephone Consumer Protection Act (TCPA)

51
Q
  • Obtain prior express written consent from consumers before robocalling them
  • No longer use an “established business relationship” to avoid getting consent from consumers when calling their home phones
  • Provide an automated, interactive opt-out mechanism during each robocall so consumers can immediately opt out of future robocalls
A

TCPA requirements to telemarketers

52
Q

Federal Communications Commission (FCC)

A

Enforces TCPA

53
Q

CAN-SPAM stands for:

A

The Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003

54
Q

Anyone who advertises products or services by email directed to or originating from the United States

A

Application of CAN-SPAM

55
Q

The law covers the transmission of commercial email messages whose primary purpose is advertising or promoting a product or service

A

CAN-SPAM

56
Q

FTC

A

Enforces CAN-SPAM

57
Q

Monetary fines and made subject to the possibility of being responsible for paying damages

A

CAN-SPAM penalties

58
Q
  • Prohibits false or misleading headers
  • Prohibits deceptive subject lines
  • Requires commercial email to contain a functioning, clearly and conspicuously displayed return email address that allows the recipient to opt out of future email from that sender
  • Prohibits sending commercial email (following a grace period of 10 business days) to an individual who has asked not to receive future email
  • Requires all commercial email to include:
    (1) clear and conspicuous identification that the message is an advertisement or solicitation (unless the recipient has provided prior affirmative consent to receive the email),
    (2) clear and conspicuous notice of the opportunity to opt out, and (3) a valid physical postal address of the sender
  • Prohibits “aggravated violations” relating to commercial email such as:
    (1) address harvesting and dictionary attacks,
    (2) the automated creation of multiple email accounts, and
    (3) the retransmission of commercial email through unauthorized accounts
  • Requires all commercial email containing sexually oriented material to include a warning label (unless the recipient has provided prior affirmative consent to receive the email)
A

CAN-SPAM requirements

59
Q

The first US state to pass Security Breach Notification Law

A

California: SB 1386

60
Q

One must disclose the breach of any computer system that contains unencrypted personal information of California residents

A

California: SB 1386

61
Q

An individual’s name in combination with any one or more of the following:
(1) social security number
(2) California identification card number
(3) driver’s license number
(4) financial account number or credit or debit card number
in combination with any required security code, access code, or password that would permit access to an individual’s financial account

A

Personal information (California SB 1386)

62
Q

Once it is determined that there has been a breach, the notification must be made “in as expedient a manner as possible” unless law enforcement requests a delay to meet its investigative requirements

A

Notice for California: SB 1386

63
Q

FTC and U.S. state attorneys

A

Enforce unfair trade practices laws/rules

64
Q

States that it is illegal to conduct “unfair or deceptive acts or practices in or affecting commerce

A

Federal Trade Commission Act

65
Q

Commercial conduct that intentionally causes substantial injury without offsetting benefits and that consumers cannot reasonably avoid; there is no intent requirement

A

Unfair trade practices

66
Q

Commercial conduct that includes false or misleading claims, or claims that omit material facts; there is no intent requirement

A

Deceptive trade practices

67
Q

The act was influenced by the EU’s GDPR and is the most expansive privacy law ever introduced at any level of U.S. governance

A

California Consumer Privacy Act (CCPA)

68
Q

Information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household

A

Personal information (CCPA)

69
Q

For-profit businesses doing business in California that meet one of three thresholds:

  1. Have over $25 million in gross annual revenue
  2. Buy, receive, sell or share for commercial purposes the personal information of more than 50,000 consumers, households or devices
  3. Derive 50% or more of their revenue from the sale of consumers’ personal information
A

Application of Personal information (CCPA)

70
Q
  1. Disclose information about how they collect and use personal information and for what purposes
  2. Refrain from selling the information of a person between the ages of 13 and 16 without their consent and refrain from selling the personal information of persons under 13 without parental consent
  3. Post a conspicuous link on their internet homepage stating “Do Not Sell My Personal Information” if sharing personal information with third parties for valuable consideration, giving consumers the power to opt out
  4. Not discriminate against any person for exercising their rights under the act by increasing fees or lowering the quality of their service
A

California Consumer Privacy Act (CCPA) requirements

71
Q
  1. The right to deletion of their personal data
  2. The right to access personal data that has been collected in the past 12 months
  3. The right to access information about categories of third parties to whom their personal data has been sold for each category of information disclosed
  4. The right to opt out of having personal data sold to third parties
A

Consumer rights under California Consumer Privacy Act (CCPA)

72
Q

2 states that followed California in making comprehensive privacy laws

A

Nevada (Bill 220 Online Privacy Law) and
Maine (Act to Protect the Privacy of Online Consumer Information)

73
Q

European privacy protection is more commonly referred to as

A

Data protection

74
Q

European privacy protection general rule

A

Not allow any collection or use of personal data unless permitted to do so by law

75
Q

To harmonize and unify the inconsistent landscape of national data protection laws within the EU

A

General Data Protection Regulation (GDPR)

76
Q

No. of member states in the EFTA (European Free Trade Association)

A

3

77
Q

Iceland
Liechtenstein
Norway

A

Member states in the EFTA (European Free Trade Association)

78
Q

No. of member states in the EU (European Union)

A

27 (26 now)

79
Q

No. of member states in the EEA (European Economic Area)

A

30

80
Q

Extends to all member states of the EEA as well as to the UK until the end of the negotiated Brexit transition period

A

Application of GDPR

81
Q

GDPR stands for:

A

General Data Protection Regulation

82
Q

EU had passed several directives, the most important is:

A

EU Directive or simply “the Directive”

83
Q

The EU counterparts to the roles played by the federal and provincial privacy commissioners in Canada

A

Data protection authorities (DPAs)

84
Q

Civil and criminal enforcement

A

Penalties in EU

85
Q

Data protection authorities (DPAs)

A

Enforces European laws

86
Q

The aim is to create a clearer, more certain, and trustworthy legal environment for both businesses and citizens, which will in turn increase both competition and innovation in the digital market

A

GDPR

87
Q

Any controller or processor of EU citizen data, regardless of where the controller or processer is headquartered and where the actual processing takes place (even if that is outside the EU)

A

Application of GDPR

88
Q
  • A telecommunications organization that offers its goods and services through its EU-based regional offices to EU data subjects
  • A retailer that offers its goods or services to EU data subjects via its online website
  • A marketing agency that monitors the purchasing habits and behaviors of EU data subjects using data-processing techniques to create individual profiles and predict personal preferences, behaviors and attitudes
A

Examples of organizations with headquarters in Canada that will be impacted by the GDPR

89
Q

An important core principle of the GDPR; states that personal data should only be collected for “specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes

A

Purpose limitation

90
Q

(1) the data subject gives explicit consent

(2) it is needed to perform a contract

(3) it is needed to comply with a legal obligation

(4) it protects the vital interests of the data subject

(5) it performs a task in the public interest

(6) it is “necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.”

A

According to GDPR, processing of data is only lawful if:

91
Q

Interests pursued by the controller or by a third party are overridden by the interests or fundamental rights and freedoms of the data subject

A

Exemption to GDPR; processing of data is lawful if:

92
Q
  1. biometric data
  2. genetic data
  3. data concerning sexual orientation
A

Sensitive personal data (GDPR)

93
Q
  1. racial or ethnic origin
  2. political opinions
  3. religious or philosophical beliefs
  4. trade union membership
A

Data special categories (GDPR)

94
Q

The natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data

A

Controller (GDPR)

95
Q

Body “which processes personal data on behalf of the controller

A

Processor (GDPR)

96
Q
A

Reviewer (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions