“protecting Privacy In State Government”

Section 1 1) TRUE OR FALSE: Protecting personal information is something that only banks and other companies have to be concerned about.

Section 1 2) TRUE OR FALSE: If people don’t trust a state department, they don’t have to turn over their personal information in order to use a government service.

Section 1 3) CHOOSE THE CORRECT ANSWER: Which of the following are good reasons for a state department to protect privacy?  

1. The Information Practices Act and other state laws require it.
2. Identity thieves want to steal personal information collected by state agencies.
3. Responding to a privacy breach costs a state department.
4. All of the above.

Section 1 4) FILL IN THE BLANKS: Law enforcement calls ________________ __________________ the crime of our times.

Section 2 1) TRUE OR FALSE: When an identity thief opens new credit accounts in the victim's name, the victim usually learns about it within a month.

Section 2 2) FILL IN THE BLANK: Identity theft is stealing someone’s personal information and using it for _____________ purposes.

Section 2 3) TRUE OR FALSE: The use of someone’s personal information when charged with a crime can be the most difficult type of identity theft for a victim to deal with.

Section 2 4) CHOOSE THE CORRECT ANSWER: Identity theft costs the average victim:

1. $50
2. $6,300
3. $630
4. $6.00
      

Section 2 5) TRUE OR FALSE: The total cost of identity theft in the U.S. in 2010 was $20 billion.

Section 2 6) FILL IN THE BLANKS: A key type of information identity thieves use to open new accounts is someone’s ____________ _____________ ______________.

Section 3 1) TRUE OR FALSE: A state department can collect personal information for any reasonable purpose.

Section 3 2) CHOOSE THE CORRECT ANSWER: Which of the following are possible penalties for violating the Information Practices Act?

1. A State department could be sued.
2. A State employee could be disciplined or fired.
3. A State employee who steals a department's personal information could be fined $5,000 and sentenced to a year in prison.
4. All of the above. 
     

Section 3 3) FILL IN THE BLANKS: The type of personal information that could trigger a notification if it is acquired by an unauthorized person is name, plus one or more of the following: Social Security number, driver's license or California Identification Card number, or _________ _________ number.

Section 3 4) TRUE OR FALSE: A California law prohibits printing Social Security numbers on health plan cards.  

Section 3 5) TRUE OR FALSE: A folder containing job applications, which include the applicants' Social Security numbers, is stolen from a State employee’s car.  The employee’s department does not have to notify individuals of this, because the information was not in digital or computerized format.

Test Your Knowledge: Review 1) If you believe that incoming mail has been stolen from your office, where should you report it FIRST?      a) To your supervisor      b) To your department’s Information Security Officer      c) To the U.S. Postal Inspection Service      d) To the local police department  

Test Your Knowledge: Review 2) Which of the following is the strongest, most secure password for access to your computer?

1. FLUFFY
2. 9151950
3. ERICKSON
4. HMWC1WC2

Test Your Knowledge: Review 3) Which of the following is the most secure way to get the Social Security numbers of seven people to a co-worker, who is on a business trip, is authorized to have the information, and needs it to do his job?

1. Send the information in an email
2. Call your co-worker and give him the information over the phone
3. Leave the information in a voice mail message on your co-worker’s cell phone
4. Fax the information to your co-worker at his hotel

Test Your Knowledge: Review 4) Which of the following would NOT be an information security incident to report to your department's Information Security Officer?

1. Loss of a laptop containing unencrypted information
2. Accidental mailing of an individual's medical records to the wrong person
3. Theft of your purse, which contained a CD with state data on it
4. Theft of a state-owned electric stapler

Test Your Knowledge: Review 5) Which of the following should you do before leaving your workstation for a meeting?

1. Put documents, disks, and other records containing personal information in a drawer or otherwise out of sight

     b) Press Ctrl-Alt-Delete and lock your computer      c) Tell your co-worker to keep an eye on your desk      d) Both a and b

Test Your Knowledge: Review 6) A state employee gives a printout of the names, addresses, and driver's license numbers of people who received unemployment benefits to a friend who wants to offer jobs to them.  Which of the following are true?

1. The employee may be found guilty of a misdemeanor punishable by up to $5,000 and one year in prison
2. The employee may be fired
3. The employee’s department may be sued
4. The employee will not be punished because his intentions were good
5. A, B, and C