CIPP/US: Certified Information Privacy Professional/United StatesDemo

By IAPP · Question Mode

QuestionQ31

Government and Court Access to Private-sector Information

Which type of information would an organization generally not be required to disclose to law enforcement?

  • A Information about medication errors under the Food, Drug and Cosmetic Act
  • B Money laundering information under the Bank Secrecy Act of 1970
  • C Information about workplace injuries under OSHA requirements
  • D Personal health information under the HIPAA Privacy Rule
Explanation

The HIPAA Privacy Rule permits covered entities to disclose protected health information to law enforcement only in defined circumstances; it does not itself require disclosure. A separate applicable law, court order, warrant, or similar legal process may require a disclosure. In contrast, the Bank Secrecy Act requires regulated financial institutions to report suspicious activity that may indicate money laundering, and OSHA requires employers to report specified work-related injuries and fatalities.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!