Discuss IAPP CIPP/US Exam Topic 1 Question 59

Which of the following is commonly required for an entity to be subject to breach notification requirements under most state laws?

AThe entity must conduct business in the state

BThe entity must have employees in the state

CThe entity must be registered in the state

DThe entity must be an information broker

Suggested Answer: D

IAPP Book, Section 4.3.1.1, paragraph 3.

Get Premium CIPP/US Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

31 comments · newest first

Viola 11 months ago

Wait, so you can be based elsewhere and still be liable? That's surprising!

Rashad 11 months ago

D? Really? That sounds too specific.

Ammie 12 months ago

C seems right to me, but I'm not 100% sure.

Verdell 12 months ago

I think B is more common, though.

Artie 1 year ago

A is definitely a requirement in most states.

Ranee 1 year ago

I don't recall specifics, but I know that being an information broker isn't always necessary, so I doubt D is correct.

Matt 1 year ago

I practiced a similar question, and I feel like having employees in the state could be a factor, so B could be right.

Noah 1 year ago

I'm not entirely sure, but I remember something about registration being important, so maybe C?

Avery 1 year ago

I think the answer might be A, since most laws focus on where the business operates.

Stefany 1 year ago

I'm a bit confused by this question. The options seem to cover different ways an entity could have a presence in a state, but I'm not sure which one is the most common requirement for breach notification laws. I'll have to think it through step-by-step.

Diane 1 year ago

Hmm, this is a tricky one. I'm not totally sure about the specifics of breach notification laws across different states. I'll have to think through the options carefully and see if any stand out as the most likely common requirement.

Rex 1 year ago

I think the key here is to focus on the common requirements across most state laws. The options seem to be getting at different types of entity presence or registration in the state, so I'll need to think about which one is most commonly required.

Brent 1 year ago

Okay, I've got a strategy for this. Most state breach notification laws are focused on protecting residents' personal information, so the entity likely needs some kind of connection to the state, like doing business there or having customers/employees there. I'll rule out the less common options.

Josephine 1 year ago

I'm a little confused by this question. The options seem similar, and I'm not totally clear on the differences between them. I'll make my best guess, but I'm not super confident in my answer.

Sylvia 1 year ago

This seems like a tricky one. I'll need to carefully consider the details about Tom's actions and the implications for Mary.

Annamae 1 year ago

This is a tricky one, but I'm leaning towards Option B. Having employees in the state seems like a logical trigger for breach notification obligations.

Erasmo 1 year ago

↳ replying to Annamae

I'm not sure, but I think Option D might also be a possibility. Being an information broker could potentially trigger breach notification obligations.

Clarinda 1 year ago

↳ replying to Annamae

I agree with you, Option A makes sense. It's important for businesses to be aware of these requirements.

Charlene 1 year ago

↳ replying to Annamae

I think it's actually Option A. Conducting business in the state would likely make the entity subject to breach notification requirements.

Ria 2 years ago

Hmm, I think Option D is the correct answer. Information brokers are often specifically targeted by breach notification laws, so that seems like the most common requirement.

Wilson 1 year ago

↳ replying to Ria

I agree with both of you. Option D makes sense, but Option A could also be a factor in some state laws.

Shantell 1 year ago

↳ replying to Ria

I'm not sure, but I think Option A might also be a requirement. Conducting business in the state seems like it could trigger breach notification requirements.

Tamie 1 year ago

↳ replying to Ria

I think Option D is correct too. Information brokers are definitely a common target for breach notification laws.

Brent 2 years ago

Haha, so if I open an online store and never set foot in the state, I can just ignore their breach laws? Sounds like a loophole to me!

Letha 2 years ago

Wait, does that mean if I run a business from my home in another state, I'm not subject to the breach laws here? That's kind of concerning.

Telma 1 year ago

↳ replying to Letha

C) The entity must be registered in the state

Jeniffer 1 year ago

↳ replying to Letha

B) The entity must have employees in the state

Fidelia 1 year ago

↳ replying to Letha

A) The entity must conduct business in the state

Glendora 2 years ago

But doesn't the entity need to have a presence in the state to be subject to breach notification requirements?

Leota 2 years ago

I disagree, I believe the answer is D) The entity must be an information broker.

Glendora 2 years ago

I think the answer is A) The entity must conduct business in the state.

IAPP CIPP/US Exam - Topic 1 Question 59 Discussion