Discuss IAPP CIPP/US Exam Topic 5 Question 52

SuperMart is a large Nevada-based business that has recently determined it sells what constitutes ''covered information'' under Nevada's privacy law, Senate Bill 260. Which of the following privacy compliance steps would best help SuperMart comply with the law?

AProviding a mechanism for consumers to opt out of sales.

BImplementing internal protocols for handling access and deletion requests.

CPreparing a notice of financial incentive for any loyalty programs offered to its customers.

DReviewing its vendor contracts to ensure that the vendors are subject to service provider restrictions.

Suggested Answer: A

SB 260 relates to consumer ability to opt-out of PII sales by data brokers. https://www.leg.state.nv.us/App/NELIS/REL/81st2021/Bill/7805/Text

Get Premium CIPP/US Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

18 comments · newest first

Dawne 11 months ago

Wait, are we sure about all these steps? Sounds complicated!

Kattie 11 months ago

D is important too, can't overlook vendor contracts!

Arlean 12 months ago

I thought C was just for marketing, not compliance?

Lorita 12 months ago

B seems more crucial for handling requests.

Micaela 1 year ago

A is definitely a must for compliance!

Reita 1 year ago

Reviewing vendor contracts sounds crucial too, like in option D. I feel like ensuring vendors comply is often overlooked in practice questions.

Bonita 1 year ago

I’m a bit confused about option C. I know financial incentives are part of privacy laws, but does it really apply here?

Cassie 1 year ago

I remember practicing a question similar to this, and I think option B makes a lot of sense since handling access and deletion requests is a key part of privacy laws.

Jame 1 year ago

I think option A about providing an opt-out mechanism is important, but I'm not entirely sure if it's the best first step for compliance.

Yvonne 1 year ago

I feel pretty confident about this. Implementing internal protocols for access and deletion requests seems like the most comprehensive approach to compliance, so that's the option I'd go with.

Barrie 1 year ago

This is a tricky one. I'm not super familiar with the Nevada privacy law, so I'll need to re-read the question carefully and think through the implications of each option.

Derick 1 year ago

Okay, I think I've got a handle on this. Providing an opt-out mechanism for sales seems like the most direct way to comply with the law, so I'm leaning towards that.

Lashawna 1 year ago

Hmm, I'm a little unsure about this one. The question is asking about the "best" compliance step, so I'll need to carefully evaluate each option and how well it aligns with the law's provisions.

Billi 1 year ago

This seems like a straightforward compliance question. I'd focus on the key requirements of the Nevada privacy law and think through which option best addresses those.

Reita 1 year ago

The tricky part is figuring out which of these are most relevant for short-term decision making. I'll need to think carefully about the context and the question prompt.

Precious 1 year ago

I'm a bit confused on how to approach this. Can someone walk me through the process of calculating the cost performance index?

Nana 1 year ago

I think A might be correct because it feels similar to a formula we practiced in class about interest rates.

Catrice 1 year ago

Option B sounds risky to me; developing in-house often takes longer. I feel like the key might be in how ready-made the solution is.

IAPP CIPP/US Exam - Topic 5 Question 52 Discussion