PII and PHI

Question 1

What kind of data can be used by itself, or with other data to identify a specific person?

Answer 1

Personally Identifiable Information (PII)

Question 2

What law affects the US government computer systems that collect, store, use, or disseminate PII?

Answer 2

Privacy Act of 1974

Question 3

What law affects healthcare providers, facilities, insurance companies, and medical data clearing houses?

Answer 3

Health Insurance Portability and Accountability Act (HIPPA)

Question 4

What law affects publicly-traded US corporations and requires certain accounting methods and financial reporting requirements?

Answer 4

Sarbanes-Oxley (SOX)

Note: Also known as “Public Company Counting Reform and Investor Protection Act”

Question 5

What law affects banks, mortgage companies, loan offices, insurance companies, investment companies, and credit card providers?

Answer 5

Gramm-Leach-Bliley Act (GLBA)

Question 6

What law requires each agency to develop, document, and implement an agency-wide information systems security program to protect their data?

Answer 6

Federal Information Security Management Act of 2002 (FISMA)

Question 7

What standard affects organizations that use credit card information?

Answer 7

Payment Card Industry Data Security Standard (PCI DSS)

Question 8

What law provides regulations that govern the security, confidentiality, and integrity of the personal information collected, stored, or processed during the election and voting process?

Answer 8

Help America Vote Act of 2002 (HAVA)

Question 9

What law is specific to California and requires immediate disclosing of data breaches?

Answer 9

SB 1386