Details

<p><br /> Introduction xxi</p> <p>Assessment Test xxx</p> <p><br /> <b>Chapter 1 Privacy in the Modern Era 1</b></p> <p>Introduction to Privacy 2</p> <p>What Is Privacy? 3</p> <p>What Is Personal Information? 4</p> <p>What Isn’t Personal Information? 5</p> <p>Why Should We Care About Privacy? 7</p> <p>Generally Accepted Privacy Principles 8</p> <p>Management 9</p> <p>Notice 10</p> <p>Choice and Consent 10</p> <p>Collection 10</p> <p>Use, Retention, and Disposal 11</p> <p>Access 11</p> <p>Disclosure to Third Parties 12</p> <p>Security for Privacy 13</p> <p>Quality 14</p> <p>Monitoring and Enforcement 14</p> <p>Developing a Privacy Program 15</p> <p>Crafting Strategy, Goals, and Objectives 15</p> <p>Appointing a Privacy Official 17</p> <p>Privacy Roles 18</p> <p>Building Inventories 18</p> <p>Conducting a Privacy Assessment 19</p> <p>Implementing Privacy Controls 20</p> <p>Ongoing Operation and Monitoring 20</p> <p>Online Privacy 21</p> <p>Privacy Notices 21</p> <p>Privacy and Cybersecurity 22</p> <p>Cybersecurity Goals 23</p> <p>Relationship Between Privacy and Cybersecurity 24</p> <p>Privacy by Design 25</p> <p>Summary 26</p> <p>Exam Essentials 26</p> <p>Review Questions 27</p> <p><b>Chapter 2 Legal Environment 31</b></p> <p>Branches of Government 32</p> <p>Legislative Branch 32</p> <p>Executive Branch 33</p> <p>Judicial Branch 34</p> <p>Understanding Laws 36</p> <p>Sources of Law 36</p> <p>Analyzing a Law 41</p> <p>Legal Concepts 43</p> <p>Legal Liability 44</p> <p>Torts and Negligence 45</p> <p>Summary 46</p> <p>Exam Essentials 46</p> <p>Review Questions 48</p> <p><b>Chapter 3 Regulatory Enforcement 53</b></p> <p>Federal Regulatory Authorities 54</p> <p>Federal Trade Commission 54</p> <p>Federal Communications Commission 60</p> <p>Department of Commerce 61</p> <p>Department of Health and Human Services 61</p> <p>Banking Regulators 62</p> <p>Department of Education 63</p> <p>State Regulatory Authorities 63</p> <p>Self-Regulatory Programs 64</p> <p>Payment Card Industry 64</p> <p>Advertising 65</p> <p>Trust Marks 66</p> <p>Safe Harbors 67</p> <p>Summary 67</p> <p>Exam Essentials 68</p> <p>Review Questions 69</p> <p><b>Chapter 4 Information Management 73</b></p> <p>Data Governance 74</p> <p>Building a Data Inventory 74</p> <p>Data Classification 75</p> <p>Data Flow Mapping 77</p> <p>Data Lifecycle Management 78</p> <p>Workforce Training 79</p> <p>Cybersecurity Threats 80</p> <p>Threat Actors 80</p> <p>Incident Response 85</p> <p>Phases of Incident Response 86</p> <p>Preparation 87</p> <p>Detection and Analysis 87</p> <p>Containment, Eradication, and Recovery 88</p> <p>Post-incident Activity 88</p> <p>Building an Incident Response Plan 90</p> <p>Data Breach Notification 92</p> <p>Vendor Management 93</p> <p>Summary 94</p> <p>Exam Essentials 94</p> <p>Review Questions 96</p> <p><b>Chapter 5 Private Sector Data Collection 101</b></p> <p>FTC Privacy Protection 103</p> <p>General FTC Privacy Protection 103</p> <p>The Children’s Online Privacy Protection Act (COPPA) 104</p> <p>Future of Federal Enforcement 107</p> <p>Medical Privacy 110</p> <p>The Health Insurance Portability and Accountability Act (hipaa) 110</p> <p>The Health Information Technology for Economic and Clinical Health Act 118</p> <p>The 21st Century Cures Act 120</p> <p>Confidentiality of Substance Use Disorder Patient Records Rule 120</p> <p>Financial Privacy 121</p> <p>Privacy in Credit Reporting 121</p> <p>Gramm–Leach–Bliley Act (GLBA) 125</p> <p>Red Flags Rule 128</p> <p>Consumer Financial Protection Bureau 129</p> <p>Educational Privacy 130</p> <p>Family Educational Rights and Privacy Act (FERPA) 130</p> <p>Telecommunications and Marketing Privacy 132</p> <p>Telephone Consumer Protection Act (TCPA) and Telemarketing Sales Rule (TSR) 132</p> <p>The Junk Fax Prevention Act (JFPA) 135</p> <p>Controlling the Assault of Non-solicited Pornography and Marketing (CAN-SPAM) Act 135</p> <p>Telecommunications Act and Customer Proprietary Network Information 137</p> <p>Cable Communications Policy Act 138</p> <p>Video Privacy Protection Act (VPPA) of 1988 139</p> <p>Summary 140</p> <p>Exam Essentials 141</p> <p>Review Questions 143</p> <p><b>Chapter 6 Government and Court Access to Private Sector Information 147</b></p> <p>Law Enforcement and Privacy 148</p> <p>Access to Financial Data 149</p> <p>Access to Communications 153</p> <p>National Security and Privacy 157</p> <p>Foreign Intelligence Surveillance Act (FISA) of 1978 157</p> <p>USA-PATRIOT Act 159</p> <p>The USA Freedom Act of 2015 162</p> <p>The Cybersecurity Information Sharing Act of 2015 163</p> <p>Civil Litigation and Privacy 164</p> <p>Compelled Disclosure of Media Information 164</p> <p>Electronic Discovery 166</p> <p>Summary 168</p> <p>Exam Essentials 168</p> <p>Review Questions 170</p> <p><b>Chapter 7 Workplace Privacy 175</b></p> <p>Introduction to Workplace Privacy 176</p> <p>Workplace Privacy Concepts 176</p> <p>U.S. Agencies Regulating Workplace Privacy Issues 177</p> <p>U.S. Antidiscrimination Laws 178</p> <p>Privacy Before, During, and After Employment 181</p> <p>Employee Background Screening 182</p> <p>Employee Monitoring 185</p> <p>Investigation of Employee Misconduct 189</p> <p>Termination of the Employment Relationship 191</p> <p>Summary 193</p> <p>Exam Essentials 193</p> <p>Review Questions 195</p> <p><b>Chapter 8 State Privacy Laws 199</b></p> <p>Federal vs. State Authority 200</p> <p>Financial Data 200</p> <p>Credit History 201</p> <p>California Financial Information Privacy Act 201</p> <p>Data Security 202</p> <p>Recent Developments 204</p> <p>Data Breach Notification Laws 212</p> <p>Elements of State Data Breach Notification Laws 212</p> <p>Key Differences Among States Today 214</p> <p>Recent Developments 215</p> <p>Marketing Laws 216</p> <p>Summary 217</p> <p>Exam Essentials 218</p> <p>Review Questions 219</p> <p><b>Chapter 9 International Privacy Regulation 223</b></p> <p>International Data Transfers 224</p> <p>European Union General Data Protection Regulation 225</p> <p>Adequacy Decisions 228</p> <p>U.S.- EU Safe Harbor and Privacy Shield 228</p> <p>Binding Corporate Rules 230</p> <p>Standard Contractual Clauses 230</p> <p>Other Approved Transfer Mechanisms 231</p> <p>APEC Privacy Framework 231</p> <p>Cross- Border Enforcement Issues 233</p> <p>Global Privacy Enforcement Network 233</p> <p>Resolving Multinational Compliance Conflicts 234</p> <p>Summary 234</p> <p>Exam Essentials 235</p> <p>Review Questions 236</p> <p><b>Appendix Answers to Review Questions 241</b></p> <p>Chapter 1: Privacy in the Modern Era 242</p> <p>Chapter 2: Legal Environment 243</p> <p>Chapter 3: Regulatory Enforcement 245</p> <p>Chapter 4: Information Management 247</p> <p>Chapter 5: Private Sector Data Collection 249</p> <p>Chapter 6: Government and Court Access to Private Sector Information 251</p> <p>Chapter 7: Workplace Privacy 252</p> <p>Chapter 8: State Privacy Laws 254</p> <p>Chapter 9: International Privacy Regulation 256</p> <p>Index 259</p>

<p><b>Mike Chapple, PhD,</b> CIPP/US, is Teaching Professor of Information Technology, Analytics, and Operations at Notre Dame’s Mendoza College of Business. He is a bestselling author of over 25 books and serves as the Academic Director of the University’s Master of Science in Business Analytics program. He holds multiple additional certifications, including the CISSP, CySA+, CISM, PenTest+, and Security+.</p><p><b>Joe Shelley, M.A.,</b> CIPP/US, is currently the Vice President for Libraries and Information Technology at Hamilton College in New York. Among other responsibilities he oversees information security and privacy programs, IT risk management, business intelligence and analytics, and data governance. He has also held certifications and certificates for ITIL, Project Management, and Scrum.</p>

<p><b>Your ultimate guide to preparing for the CIPP/US exam</b></p><p>The <i>IAPP CIPP / US Certified Information Privacy Professional Study Guide</i> is your one-stop resource for complete coverage of the challenging CIPP/US exam. This Study Guide covers 100% of the CIPP/US domain competencies. You’ll prepare for the exam smarter and faster with Sybex thanks to authoritative and accurate content including practice tests that validate and measure exam readiness. Including an assessment exam, end of chapter review questions, and the two complete practice exams, you get more than 350 questions to hone your test taking skills. You’ll be ready to tackle the rigorous demands of work in the privacy field as you reinforce and retain what you’ve learned with the Sybex online learning environment and test bank, accessible across multiple devices. Get prepared for the CIPP/US exam, and a job in the privacy sector.</p><p><b>Coverage of 100% of all exam objectives in this <i>Study Guide</i> means you’ll be ready for:</b></p><ul><li><b>The US privacy environment, including the structure and enforcement of US law</b></li><li><b>Legal limits on private-sector collection and use of data</b></li><li><b>Government and court access to private-sector information</b></li><li><b>Workplace privacy</b></li><li><b>State privacy laws</b></li></ul><p><b>Interactive learning environment</b></p><p>Take your exam prep to the next level with Sybex’s superior interactive online study tools. To access our learning environment, simply visit <b>www.wiley.com/go/sybextestprep</b>, register your book to receive your unique PIN, and instantly gain one year of FREE access after activation to:</p><ul><li><b>Interactive test bank</b> with 2 custom practice exams to help you identify areas where further review is needed. Get more than 90% of the answers correct, and you’re ready to take the certification exam.</li><li><b>More than 100 electronic flashcards</b> to reinforce learning and last-minute prep before the exam</li><li><b>Comprehensive glossary</b> in PDF format gives you instant access to the key terms so you are fully prepared</li></ul><p><b>About the CIPP/US Program</b></p><p>The IAPP CIPP/US certification is the ideal credential for those needing a comprehensive understanding of the United States’ data privacy laws and regulations who wish to assist organizations bolster compliance and risk mitigation practices. Visit <b>https://iapp.org/certify/cipp/</b> for more information.</p>

US