I. Intro to Privacy Landscape (Section A: General Introduction to Privacy Concepts) Flashcards
What does it mean to ‘process’ date?
Processing data refers to almost everything that can be done to data (ie, collection, recording, organization, storage, alteration, use, disclosure, destruction, etc.
True or False: The requirement of express, affirmative consent is sometimes referred to as “opt-in” consent.
True
True or False: A “data controller” cannot process information beyond the scope of how its “data processors” can process that information?
False. A “data controller” has the ultimate authority over how data is processed.
The principle that data should be collected only for the purposes for which it is relevant is often referred to as what?
The collection limitation principle.
Which organization adopted the Madrid Resolution in 2009?
The International Conference of Data Protection and Privacy Commissioners.
Who is generally subject to the greatest amount of regulation, a “data controller” or a “data processor”?
A “data controller” is generally subject to the greatest regulation because the “data controller” has the ultimate responsibility for what is done with personal information.
What was the first attempt to adopt a set of FIPs in the United States?
A 1973 report by the Department of Health, Education, and Welfare, which was later renamed to the Department of Health and Human Services.
What are the two main aspects of privacy protection covered by FIPs?
(1) individual rights; and (2) how an organization manages the data it collects.
What is the underlying goal of the FIP of “notice”?
To provide consumers the opportunity to make informed decisions about how their personal information is collected, used, etc.
What does the term Territorial Privacy refer to?
The protection of one’s environment or physical space.
