IS3350 CHAPTER 9 Flashcards

1
Q

A law that requires that state residents be notifies if an entity experiences a security breach that compromises their personal data is called ___?

A

BREACH NOTIFICATION LAW

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

The materials generated while creating laws. It includes committee reports and hearings. It also transcripts of debate and reports issued by legislatures. It is reviewed to help determine what a legislature intended when it created a law and is called ___?

A

LEGISLATIVE HISTORY

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

A legal concept that protects an entity from liability if it follows the law is called a ___?

A

SAFE HARBOR

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q
  1. The ChoicePoint data breach was the triggering event that caused many states to create data protection laws.
    TRUE OR FALSE
A

TRUE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q
  1. California’s breach notification law went into effect in ___.
A

2003

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q
  1. Most states define personal information as NAME and which of the following elements?
  2. Date of birth
  3. Address
  4. Phone number
  5. Social Security number
  6. None of the above
A

Social Security number

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q
  1. An encryption safe harbor is ___.
A

A legal concept that protects an entity from liability if it follows the law

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q
  1. What is a stat breach notification law?
  2. A law that requires that residents be notified if a dam breaks
  3. A law that requires residents be notified if a business has a security breach that compromises their personal data
  4. A law that requires that residents be notified if a business has a security breach that compromises the business’s confidential data
  5. A law that requires that businesses be notified if a government has a security breach that compromises the business’s confidential data
  6. None of the above
A

A law that requires residents be notified if a business has a security breach that compromises their personal data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q
  1. Which types of entities are sometimes excluded from breach notification laws?
  2. GLBA financial institutions
  3. HIPAA covered entities
  4. Out-of-state businesses
  5. 1 & 2 only
  6. 1, 2, & 3
A

GLBA financial institutions
&
HIPAA covered entities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q
  1. What is NOT a business day?
  2. An official workday
  3. A day of the week that includes Monday through Friday
  4. Memorial Day
  5. Tuesday
  6. None of the above
A

Memorial Day

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q
  1. “Clear and conspicuous” notice means that ___.
A

A person must be able to easily understand it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q
  1. Which states allow data breach notification to be given by telephone?
  2. California
  3. Colorado
  4. North Carolina
  5. 1 & 2
  6. 2 & 3
A

Colorado
&
North Carolina

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q
  1. What technology standards are permitted under the Nevada encryption law?
  2. PCI DSS
  3. SO 1799
  4. NIST
  5. FTC
  6. HIPAA
A

NIST

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q
  1. Which states have required businesses to follow all, or part, of the PCI DSS?
  2. Minnesota
  3. Nevada
  4. California
  5. 1 & 2
  6. 1 & 3
A

Minnesota
&
Nevada

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q
  1. A private cause of action is ___.
A

A legal concept that describes a person’s right to sue another for harm that the latter caused.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q
  1. If the US Congress creates a federal breach notification law, what happens to state laws?
  2. They are no longer valid
  3. They are still valid as long as they are stricter than federal law
  4. They are still valid in their original form
  5. They are still valid so long as they are weaker than federal law
  6. None of the above
A

They are no longer valid

17
Q
  1. What is the purpose of legislative history?
  2. To help determine which laws to abolish
  3. To help decide how to create new laws
  4. To help determine how old a law is
  5. To help determine what a legislature intended when it created a law
  6. None of the above
A

To help determine what a legislature intended when it created a law

18
Q
  1. What is one of the biggest differences between civil and criminal law?
  2. The amount of fines
  3. Whether a person can be sentenced to prison
  4. How long the offer stays on your criminal record
  5. The type of judge that hears the case
  6. The color of the prison jumpsuits
A

Whether a person can be sentenced to prison