IAPP CIPP/US Exam - Topic 5 Question 52 Discussion

Actual exam question for IAPP's CIPP/US exam

Question #: 52
Topic #: 5

SuperMart is a large Nevada-based business that has recently determined it sells what constitutes ''covered information'' under Nevada's privacy law, Senate Bill 260. Which of the following privacy compliance steps would best help SuperMart comply with the law?

AProviding a mechanism for consumers to opt out of sales.

BImplementing internal protocols for handling access and deletion requests.

CPreparing a notice of financial incentive for any loyalty programs offered to its customers.

DReviewing its vendor contracts to ensure that the vendors are subject to service provider restrictions.

Show Suggested Answer

Suggested Answer: A

SB 260 relates to consumer ability to opt-out of PII sales by data brokers. https://www.leg.state.nv.us/App/NELIS/REL/81st2021/Bill/7805/Text

by Luisa at Jan 23, 2024, 02:29 PM

Limited Time Offer

25%

Off

Get Premium CIPP/US Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dawne

4 months ago

Wait, are we sure about all these steps? Sounds complicated!

upvoted 0 times

...

Kattie

4 months ago

D is important too, can't overlook vendor contracts!

upvoted 0 times

...

Arlean

4 months ago

I thought C was just for marketing, not compliance?

upvoted 0 times

...

Lorita

4 months ago

B seems more crucial for handling requests.

upvoted 0 times

...

Micaela

4 months ago

A is definitely a must for compliance!

upvoted 0 times

...

Reita

5 months ago

Reviewing vendor contracts sounds crucial too, like in option D. I feel like ensuring vendors comply is often overlooked in practice questions.

upvoted 0 times

...

Bonita

5 months ago

I’m a bit confused about option C. I know financial incentives are part of privacy laws, but does it really apply here?

upvoted 0 times

...

Cassie

5 months ago

I remember practicing a question similar to this, and I think option B makes a lot of sense since handling access and deletion requests is a key part of privacy laws.

upvoted 0 times

...

Jame

5 months ago

I think option A about providing an opt-out mechanism is important, but I'm not entirely sure if it's the best first step for compliance.

upvoted 0 times

...

Yvonne

5 months ago

I feel pretty confident about this. Implementing internal protocols for access and deletion requests seems like the most comprehensive approach to compliance, so that's the option I'd go with.

upvoted 0 times

...

Barrie

5 months ago

This is a tricky one. I'm not super familiar with the Nevada privacy law, so I'll need to re-read the question carefully and think through the implications of each option.

upvoted 0 times

...

Derick

5 months ago

Okay, I think I've got a handle on this. Providing an opt-out mechanism for sales seems like the most direct way to comply with the law, so I'm leaning towards that.

upvoted 0 times

...

Lashawna

5 months ago

Hmm, I'm a little unsure about this one. The question is asking about the "best" compliance step, so I'll need to carefully evaluate each option and how well it aligns with the law's provisions.

upvoted 0 times

...

Billi

5 months ago

This seems like a straightforward compliance question. I'd focus on the key requirements of the Nevada privacy law and think through which option best addresses those.

upvoted 0 times

...

Reita

6 months ago

The tricky part is figuring out which of these are most relevant for short-term decision making. I'll need to think carefully about the context and the question prompt.

upvoted 0 times

...