QuestionQ133

Federal Privacy Laws

Which of the following correctly states the purpose of a particular federal enforcement agency?

  • A The National Institute of Standards and Technology (NIST) has established mandatory privacy standards that can then be enforced against all for-profit organizations by the Department of Justice (DOJ).
  • B The Cybersecurity and Infrastructure Security Agency (CISA) is authorized to bring civil enforcement actions against organizations whose website or other online service fails to adequately secure personal information.
  • C The Federal Communications Commission (FCC) regulates privacy practices on the internet and enforces violations relating to websites’ posted privacy disclosures.
  • D The Federal Trade Commission (FTC) is typically recognized as having the broadest authority under the FTC Act to address unfair or deceptive privacy practices.
Explanation

The FTC has broad consumer-protection authority under Section 5 of the FTC Act to prevent unfair or deceptive acts or practices in commerce. This authority is a principal basis for FTC enforcement involving deceptive privacy statements and unfair privacy or data-security practices.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!