Consumer Privacy

Consumer Privacy

Are you ready to test your knowledge about consumer privacy? This ten-question multiple-choice quiz will explore consumer privacy, how it is protected, and what you can do to protect it. After completing all ten questions, click "What's my grade" at the end of the quiz to see how you did.

Correct!

Incorrect. You answered "". But the correct answer is "". Please make sure and read the information at the bottom to better understand the answer.

Which federal department is the primary enforcement agency for laws that protect consumer privacy?
The Division of Privacy & Identity Protection within the Federal Trade Commission oversees consumer privacy, credit reporting, identity theft, and information security. Specifically, this division of the FTC enforces The Fair Credit Reporting Act, Gramm-Leach Bliley, and the Children's Online Privacy Protection Act.

Correct!

Incorrect. You answered "". But the correct answer is "". Please make sure and read the information at the bottom to better understand the answer.

Which of the following are not Consumer Reporting Agencies?
The 'big 3' consumer reporting agencies are Experian, Equifax, and TransUnion. Under the Fair Credit Reporting Act terms, consumers can request a free copy of their credit report once every 12 months for each of these three reporting agencies. Credit reports can be ordered online at www.annualcreditreport.com or by phone at 1-877-322-8228.

Correct!

Incorrect. You answered "". But the correct answer is "". Please make sure and read the information at the bottom to better understand the answer.

What responsibilities do lenders have as providers of information to Credit Reporting Agencies?
The Fair Credit Reporting Act (FCRA) has established a wide range of guidelines, policies and procedures the furnishing of information to Credit Reporting Agencies. All of the items listed are required under the FCRA.

Correct!

Incorrect. You answered "". But the correct answer is "". Please make sure and read the information at the bottom to better understand the answer.

Which of the following types of companies are not governed by the Fair Credit Reporting Act?
Specialty consumer reporting agencies collect and share information about your transaction history with businesses. Examples of transactions include bank accounts, apartment rental payments, insurance claims, utility payments, employment information, and medical records. The 'big 3' credit reporting agencies include Experian, Equifax, and TransUnion. Both of these types of organizations are governed by the Fair Credit Reporting Act (FCRA). Direct marketers are not.

Correct!

Incorrect. You answered "". But the correct answer is "". Please make sure and read the information at the bottom to better understand the answer.

Website privacy policies do the following:
Website privacy policies must disclose data collection practices, how the website owner will use information collected during a website visit, and why they need the information they are collecting. They do not prohibit any such practices, only their disclosure.

Correct!

Incorrect. You answered "". But the correct answer is "". Please make sure and read the information at the bottom to better understand the answer.

When shopping online, which of the following best practices should you observe?
When you are shopping online, you must take the necessary steps to make sure that the online retail site you are shopping at provides a secure environment for the transfer of credit card information between your computer and their systems. That means making sure every stage of the connection is secure, including your internet connection and the website you are shopping at. It is also important to make sure that promotional emails you receive are from 'phishers' trying to trick you into providing your information at a fraudulent website.

Correct!

Incorrect. You answered "". But the correct answer is "". Please make sure and read the information at the bottom to better understand the answer.

The legislation that requires financial institutions to explain their information-sharing practices to their customers and safeguard sensitive data is known as?
The Gramm-Leach-Bliley Act (also known as the Financial Modernization Act) is a federal law enacted in 1999 that requires financial institutions and other companies that offer consumer financial products, or services like loans, financial or investment advice, or insurance, to explain their information-sharing practices to their customers and to safeguard sensitive information.

Correct!

Incorrect. You answered "". But the correct answer is "". Please make sure and read the information at the bottom to better understand the answer.

The federal Health Insurance Portability and Accountability Act (HIPAA) covers the use of medical records only for the following cases:
The HIPAA Privacy Rule applies to health plans, health care clearinghouses, and those health care providers that conduct certain health care transactions electronically. It was created to protect medical records and other personal health information. It does not apply to personal medical information that you might provide to another organization or billing or payment information covered under the rule.

Correct!

Incorrect. You answered "". But the correct answer is "". Please make sure and read the information at the bottom to better understand the answer.

When signing up or visiting a social network site, make sure that you protect your personal information and privacy by:
Under consumer privacy regulations, websites, including social media sites, are only required to disclose their data collection practices and how they will use information collected about site visitors. As a user, it is incumbent upon you to understand what information is being collected, how it is being used, and to 'opt-out' of any practices that you find objectionable.

Correct!

Incorrect. You answered "". But the correct answer is "". Please make sure and read the information at the bottom to better understand the answer.

Which of the following is not considered to be 'personally identifiable information'?
The United States General Services Administration, or GSA, defines personally identifiable information as 'information which can be used to distinguish or trace an individual's identity, such as their name, social security number, biometric records, etc. alone, or when combined with other personal information which is linked or linkable to a specific individual, such as date and place of birth, mother's maiden name, etc.' The name of the school you attended or your place of employment is not specific enough to you, as an individual, to meet these criteria.

You scored out of 10.

What's my grade?