Quiz #13

________ is information that is publicly available about all students at a school.

Directory information

The Sarbanes-Oxley Act doesn't apply to publicly traded companies.

False

The regulating agency for the Gramm-Leach-Bliley Act is the ________

Federal Trade Commission

____________ is a person's right to control the use and disclosure of his or her own personal information.

Privacy

Information systems security is about ensuring the confidentiality, integrity, and availability of IT infrastructures and the systems they comprise.

True

The Family Educational Rights and Privacy Act (FERPA) is the main federal law protecting the privacy of student information.

True

The Public Company Accounting Reform and Investor Protection Act is also known as the Sarbanes-Oxley Act of 2002.

True

Information regulated under the Sarbanes-Oxley Act is ________

corporate financial information

Social Security numbers, financial account numbers, credit card numbers, and date of birth are examples of __________ as stipulated under the Gramm-Leach-Bliley Act.

nonpublic personal information (NPI)

Students who have had their Family Educational Rights and Privacy Act (FERPA) rights violated are allowed to sue a school for that violation.

False

The Federal Trade Commission (FTC) Safeguards Rule requires a financial institution to create a written information security program that must state how the institution collects and uses customer data.

True

Under the Children's Internet Protection Act (CIPA), a library or school must be able to disable the technology protection measure (TPM) for any adult.

True

The regulating agency for the Family Educational Rights and Privacy Act is the ________.

U.S. Department of Education

Health plans, health care clearinghouses, and all health care providers that transmit PHI in an electronic form are known as ________ under Health Insurance Portability and Accountability Act (HIPAA).

covered entities

The Family Educational Rights and Privacy Act (FERPA) allows a special category of personally identifiable information to be disclosed without student consent. A school can do this as long as it has given notice to the student that it will disclose this information. This category of information is called _____________.

directory information