Module #1: Introduction to Privacy Flashcards

1
Q

What are the 4 classes of Privacy?

A

1) Information Privacy
2) Communications Privacy
3) Bodily Privacy
4) Territorial Privacy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is covered by information Privacy

A

Establishes the rules that govern the collection and handling of personal information.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is covered by Communications Privacy

A

Establishes protections of the means of correspondence such as:

  • Postal Mail
  • Telephone conversations
  • Emails
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are examples of personal info?

A
  • Financial and Medical
  • Government records
  • Internet activity
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are examples of communications privacy?

A
  • Postal Mail
  • Telephone conversations
  • Emails
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is covered by Bodily Privacy?

A

Establishes protections of a person’s physical being and any invasion thereof:

  • genetic and drug testing
  • body cavity searches
  • birth control, abortions, and adoption
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are examples of bodily privacy?

A
  • genetic and drug testing
  • body cavity searches
  • birth control, abortions, and adoption
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is covered by Territorial Privacy?

A

Establishes placing limits on the ability to intrude into another individual’s environment, including:

  • Home
  • Workspace
  • Public Space
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are the 4 principles of Fair Information Practices?

A
  • Rights of individuals
  • Controls on the information
  • Information lifecycle
  • Management
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Fair Information Practices:

What is covered by the Rights of Individuals principle?

A
  • Notice
  • Choice and Consent
  • data subject access
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Fair Information Practices:

What is covered by Controls on the information principle?

A
  • Information security
  • integrity
  • quality
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Fair Information Practices lifecycle:

What is covered by the Information lifecycle principle?

A

collection, use and retention, disclosure, and destruction

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Fair Information Practices lifecycle:

What is covered by Management principle?

A

Management and administration;
monitoring and enforcement;
demonstrating compliance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is data protection?

A

the ways in which privacy is

protected through laws, rules and regulations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is Fair Information Practices?

A

They are guidelines for

handling, storing and managing personal information properly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Data controller

A

An organization or individual with the authority to decide how and why
information about data subjects is to be processed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Data subject

A

An individual about whom information is being processed. Example: Consumer,
employee, patient

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Data processor

A

An organization or individual, often a third-party outsourcing service that
processes data on behalf of the data controller

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Data protection authority

A

Enforces privacy or data protection laws and regulations. U.S. has no national data protection authority per se, but

several groups oversee privacy matters
(FTC, state attorneys general, federal financial regulators)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Is privacy in the Constitution?

A

Zero. You can infer that the founding fathers did think about this. When you look at
the amendments.

Third Amendment: I can’t come in and quarter soldiers in your home.

Fourth Amendment: Right to protection against undue seizure.

Fifth Amendment: Can’t
incriminate myself.

Thirteenth Amendment: Due process.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

1970s in privacy?

A

privacy concerns about the collection of personal information began

The Privacy Act of 1974

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What happened in 1973?

A

Fair information practices (FIPs) were developed in 1973 and provided guidelines for handling, storing and managing data with privacy, security and fairness that are still in use today.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What happened in 1974?

A

The Privacy Act of 1974 mandates how information will be adequately processed and safeguarded

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What decade?

direct marketing and telemarketing tactics

A

1980s in privacy?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
OECD Guidelines?
the Organisation for Economic Co-operation and Development issued Guidelines Governing the Protection of Privacy and Transborder Flows of Personal Data (OECD Guidelines) that aimed to facilitate data flows and protect personal data in a global economy.
26
first data protection instrument for several Council of Europe member states.
Council of Europe Convention, known as Convention 108?
27
privacy enforcement cases related to unfair and deceptive practices in healthcare, education, and finance
1990s in privacy
28
identity theft and privacy programs
2000s in privacy
29
The Fair Credit Reporting Act
1970s privacy concerns about the collection of personal information began
30
Fair information practices (FIPs)
1970s privacy concerns about the collection of personal information began
31
The Cable Communications Policy Act
1980s direct marketing and telemarketing tactics
32
The Electronic Communications Privacy Act
1980s direct marketing and telemarketing tactics
33
The Video Privacy Protection Act
1980s direct marketing and telemarketing tactics
34
Americans with Disabilities Act
1990s privacy enforcement cases related to unfair and deceptive practices in healthcare, education, and finance
35
The Telephone Consumer Protection Act
1990s privacy enforcement cases related to unfair and deceptive practices in healthcare, education, and finance
36
The Communications Assistance to Law Enforcement Act
1990s privacy enforcement cases related to unfair and deceptive practices in healthcare, education, and finance
37
The Telemarketing Sales Rules
1990s privacy enforcement cases related to unfair and deceptive practices in healthcare, education, and finance
38
The Telecommunications Act
1990s privacy enforcement cases related to unfair and deceptive practices in healthcare, education, and finance
39
The Health Insurance Portability and Accountability Act (or HIPPA)
1990s privacy enforcement cases related to unfair and deceptive practices in healthcare, education, and finance
40
The Children’s Online Privacy Protection Act
1990s privacy enforcement cases related to unfair and deceptive practices in healthcare, education, and finance
41
Gramm-Leach-Bliley Act
1990s privacy enforcement cases related to unfair and deceptive practices in healthcare, education, and finance
42
No Child left behind Act
2000s identity theft and privacy programs
43
USA PATRIOT Act
2000s identity theft and privacy programs
44
Controlling the Assault of Non-Solicited Pornography and Marketing Act
2000s identity theft and privacy programs
45
Asia Pacific Economic Cooperation, which agreed to a Privacy Framework
2000s identity theft and privacy programs
46
Genetic Information Nondiscrimination Act
2000s identity theft and privacy programs
47
Madrid Resolution which outlines International Standards on the Protection of Personal data and Privacy
2000s identity theft and privacy programs
48
Healthcare Information Technology for Economic and Clinical Health Act
2000s identity theft and privacy programs
49
2010s in privacy?
Privacy laws have evolved along with the evolution of social media, cloud computing, online ads and location-based services.
50
The White House report, “Consumer Data Privacy in a Networked World: A Framework for Protecting Privacy and Promoting Innovation in the Global Digital Economy”
2010s Privacy laws have evolved along with the evolution of social media, cloud computing, online ads and location-based services
51
The FTC report principles, “Protecting Consumer Privacy in an Era of Rapid Change: Recommendations for Businesses and Policymakers”
2010s Privacy laws have evolved along with the evolution of social media, cloud computing, online ads and location-based services
52
The Cybersecurity Information Sharing Act
2010s Privacy laws have evolved along with the evolution of social media, cloud computing, online ads and location-based services
53
General Data Protection Regulation—more commonly referred to as the GDPR—became law.
2010s Privacy laws have evolved along with the evolution of social media, cloud computing, online ads and location-based services
54
Personal Info
Info that makes it possible to identify an individual
55
Nonpersonal Info
anonymizing personal info by removing identifying elements renders it nonpersonal
56
sensitive personal info
a subset of personal info; usually requires additional safeguarding of its collection, use, and disclosure
57
pseudonymized info
a unique code or pseudonym is used as a temporary solution to protecting info. it is reversible.
58
public records
- real estate records - birth and death records - licensing records - statistical data
59
publicly available info
- telephone books - public media - newspapers - search engine results
60
nonpublic info
- medical records - financial info - customer databases - adoption recordsPrivacy laws have evolved along with the evolution of social media, cloud computing, online ads and location-based services
61
which authorities oversee privacy-related issues in the US
- state attorney generals - federal financial regulators - FTC (federal trade commission)
62
Which types of personal info may qualify as sensitive personal info?
- Medical history - drivers license # - social security # - bank account #