CIPM: Certified Information Privacy ManagerDemo

Question

Which of the following statements about complying with breach-notification law is not correct?

A A consulting firm may certify that a breach notification law does not apply to your organization.
B Breach notification may be required when state law requires it, and Federal law is silent.
C A foreign breach notification law may apply to a breach that only involves your citizens.
D A Federal agency may not be required to comply with a state breach notification law.

Explanation

A consulting firm may provide an assessment of legal obligations, but it cannot conclusively certify that a breach-notification law is inapplicable to an organization. The applicability of such laws depends on the governing statute, jurisdiction, and facts of the incident.

CIPM: Certified Information Privacy ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ182

Community Discussion