Privacy & Legal Compliance (Security+) Quiz

1. True or False: GDPR only applies to organizations physically located in the EU.

True

False

2. True or False: GDPR applies only to businesses collecting data from EU citizens.

True

False

3. Which of the following is a core requirement of PCI DSS?

Maintain a secure network

Protect cardholder data

Implement access control measures

All of the above

Submit

5. What is required under HIPAA's Breach Notification Rule?

Immediate notification to affected individuals

Notification to HHS and media if affecting 500+ individuals

Documentation of breach circumstances

All of the above

6. True or False: PCI DSS compliance is optional for e-commerce businesses.

True

False

7. Which regulation mandates regular internal audits and assessments?

GDPR

HIPAA

SOX

All of the above

Submit

9. Under PCI DSS, what is the minimum password length requirement?

6 characters

8 characters

10 characters

12 characters

10. What does PHI stand for in HIPAA terminology?

Personal Health Identifier

Protected Health Information

Public Health Initiative

Personal Hygiene Information

11. Which regulation primarily protects the personal data of European Union residents?

HIPAA

GDPR

SOX

PCI DSS

12. Which framework is specifically focused on payment card security?

GDPR

HIPAA

PCI DSS

SOX

Submit

14. What is the primary purpose of HIPAA's Security Rule?

Protect financial data

Ensure confidentiality, integrity, and availability of ePHI

Regulate credit card transactions

Monitor stock market activity

15. Under GDPR, individuals have the right to request deletion of their personal data. What is this right called?

Right to access

Right to be forgotten

Right to rectification

Right to restrict processing

Submit

17. Which law requires public companies to maintain accurate financial records?

GDPR

HIPAA

Sarbanes-Oxley (SOX)

PCI DSS

18. HIPAA applies primarily to which type of organizations?

Financial institutions

Healthcare providers and health plans

Retail companies

Manufacturing firms

19. What is the maximum fine for GDPR non-compliance?

$10 million or 2% of revenue

$20 million or 4% of revenue

$30 million or 6% of revenue

$50 million or 10% of revenue

Compliance Quiz: Can You Master GDPR, HIPAA, SOX & PCI DSS?

1. True or False: GDPR only applies to organizations physically located in the EU.

2.

What first name or nickname would you like us to use?

2. True or False: GDPR applies only to businesses collecting data from EU citizens.

3. Which of the following is a core requirement of PCI DSS?

4. Under SOX, the CEO and CFO must personally certify the accuracy of ____ statements.

5. What is required under HIPAA's Breach Notification Rule?

6. True or False: PCI DSS compliance is optional for e-commerce businesses.

7. Which regulation mandates regular internal audits and assessments?

8. GDPR requires organizations to notify affected individuals of data breaches within ____ days.

9. Under PCI DSS, what is the minimum password length requirement?

10. What does PHI stand for in HIPAA terminology?

11. Which regulation primarily protects the personal data of European Union residents?

12. Which framework is specifically focused on payment card security?

13. SOX requires companies to establish internal control procedures for ____ reporting.

14. What is the primary purpose of HIPAA's Security Rule?

15. Under GDPR, individuals have the right to request deletion of their personal data. What is this right called?

16. PCI DSS compliance is mandatory for organizations that handle ____.

17. Which law requires public companies to maintain accurate financial records?

18. HIPAA applies primarily to which type of organizations?

19. What is the maximum fine for GDPR non-compliance?