Discuss IAPP CIPP/C Exam Topic 3 Question 16

Which of the following accurately describes the purpose of a particular federal enforcement agency?

AThe National Institute of Standards and Technology (NIST) has established mandatory privacy standards that can then be enforced against all for-profit organizations by the Department of Justice (DOJ).

BThe Cybersecurity and Infrastructure Security Agency (CISA) is authorized to bring civil enforcement actions against organizations whose website or other online service fails to adequately secure personal information.

CThe Federal Communications Commission (FCC) regulates privacy practices on the internet and enforces violations relating to websites' posted privacy disclosures.

DThe Federal Trade Commission (FTC) is typically recognized as having the broadest authority under the FTC Act to address unfair or deceptive privacy practices.

Suggested Answer: D

Get Premium CIPP/C Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Marion 12 months ago

D is definitely the most accurate here, no doubt about it!

Susana 1 year ago

FCC regulates internet privacy? I thought that was just for telecoms.

Sharika 1 year ago

Wait, CISA can actually bring civil actions? That’s news to me.

Chauncey 1 year ago

Totally agree, FTC has the broadest authority for privacy issues!

Arletta 1 year ago

NIST doesn't enforce privacy standards, that's DOJ's job.

Tess 1 year ago

I thought NIST set standards but wasn't sure they had enforcement power like the DOJ. That makes me lean away from A.

Sunny 1 year ago

I feel like I saw a question similar to this in practice exams, and I think the FTC does have broad authority, so D seems likely.

Gilma 1 year ago

I'm not entirely sure, but I think CISA has some authority over cybersecurity, but I'm not confident about the specifics.

Essie 1 year ago

I remember studying about the FTC and its role in privacy enforcement, so I think option D might be the right choice.

Lashandra 1 year ago

Hmm, I think this is asking where we can access the Compliance Manager tool. Let me think about the different Microsoft admin centers I know of.

Latonia 1 year ago

Hmm, I'm a bit unsure about this one. I'll have to carefully read through the options and see if I can eliminate any of them.

Glen 1 year ago

I remember studying that zero-based budgeting can really help avoid complacency, which is a good thing for charities that need to be efficient with funds.

IAPP CIPP/C Exam - Topic 3 Question 16 Discussion