Privacy by Design & Technology Compliance Flashcards
6 cards from real PLC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Privacy by Design & Technology Compliance flashcards as text
Which US federal law specifically governs the privacy of video rental and streaming records, and what does it prohibit?
Answer: VPPA — prohibits disclosure of video viewing records without consent
The Video Privacy Protection Act (VPPA) prohibits video service providers from knowingly disclosing personally identifiable information about consumers' video rental or streaming choices without consent.
Under the concept of 'Privacy by Default,' what should the default settings of a new application be configured to?
Answer: The most privacy-protective settings, requiring users to opt in for additional sharing
Privacy by Default means that without any action by the user, only the minimum necessary data is processed, and the strictest privacy settings are active out of the box.
What is 'differential privacy,' and how is it used by companies like Apple and Google?
Answer: A mathematical technique adding statistical noise to datasets so individual data cannot be inferred
Differential privacy adds calibrated statistical noise to query results so that the presence or absence of any individual's data cannot be determined from the output.
Under the FTC's framework for the Internet of Things (IoT), which of the following is a recommended privacy best practice for IoT device manufacturers?
Answer: Building security into devices at the design stage and minimizing data collection
The FTC's IoT guidance recommends security by design and data minimization as key practices, limiting collection to data reasonably necessary for the product's functionality.
A company uses facial recognition technology to identify customers entering its retail store. Under US privacy law, which state has the MOST restrictive law specifically governing commercial biometric data collection?
Answer: Illinois
Illinois' Biometric Information Privacy Act (BIPA) is the most restrictive US biometric law, requiring informed written consent before collection and providing a private right of action with statutory damages.
Which of the following best describes 'privacy theater' — a concept privacy professionals must help organizations avoid?
Answer: Implementing visible but ineffective privacy measures that create a false appearance of compliance
Privacy theater refers to cosmetic compliance measures — like dense privacy policies or cookie banners — that appear protective but do not meaningfully reduce privacy risks or respect user rights.