PRIVACY LAW QUIZ

A company in the United States sells products online and collects personal data from customers in Spain. One of the customers requests that the company delete their personal data from its system.

• General Data Protection Regulation (GDPR)

• Family Educational Rights and Privacy Act (FERPA)

• Health Insurance Portability and Accountability Act (HIPAA)

• Institutional Review Board (IRB)

A professor at a U.S. college wants to share a student’s academic performance with the student’s parents without getting the student’s consent.

• General Data Protection Regulation (GDPR)

• Family Educational Rights and Privacy Act (FERPA)

• Health Insurance Portability and Accountability Act (HIPAA)

• Institutional Review Board (IRB)

A nurse at a clinic discusses a patient’s test results with a friend while waiting in line at a coffee shop.

• General Data Protection Regulation (GDPR)

• Family Educational Rights and Privacy Act (FERPA)

• Health Insurance Portability and Accountability Act (HIPAA)

• Institutional Review Board (IRB)

A university researcher plans to conduct interviews with high school students about their experiences with online learning and wants to ensure ethical treatment of participants.

• General Data Protection Regulation (GDPR)

• Family Educational Rights and Privacy Act (FERPA)

• Health Insurance Portability and Accountability Act (HIPAA)

• Institutional Review Board (IRB)

A retail shop stores customer credit card details in a plain text file on its computer to make future purchases easier.

• Payment Card Industry Data Security Standard (PCI DSS)

• Family Educational Rights and Privacy Act (FERPA)

• Health Insurance Portability and Accountability Act (HIPAA)

• Institutional Review Board (IRB)

A school counselor’s records of a student’s therapy sessions at a U.S. university are requested by someone outside the counseling office without the student’s permission.

• Payment Card Industry Data Security Standard (PCI DSS)

• Family Educational Rights and Privacy Act (FERPA)

• Health Insurance Portability and Accountability Act (HIPAA)

• Institutional Review Board (IRB)

A healthcare provider shares a patient's medical history with a third-party insurance company without obtaining the patient's consent.

• Institutional Review Board (IRB)

• Family Educational Rights and Privacy Act (FERPA)

• Health Insurance Portability and Accountability Act (HIPAA)

• General Data Protection Regulation (GDPR)

A teacher at a private school wants to disclose a student's disciplinary record to a potential employer without the student's permission.

• Health Insurance Portability and Accountability Act (HIPAA)

• Family Educational Rights and Privacy Act (FERPA)

• General Data Protection Regulation (GDPR)

• Institutional Review Board (IRB)