IAPP CIPP/US Practice Exam

Category - Professional

Tennessee SB 2005 removes which provision regarding notice of personal information breaches?
  1. Provision stating notice will only be given if unencrypted PI has been breached
  2. Provision stating that notice will be given to parties regardless of whether actual damages are recoverable
  3. Provision stating that state agencies are responsible for providing notice of breaches to affected parties
  4. Provisions that notice must include the affected party’s sole responsibility for taking data to protect from the further potential of harm.
Explanation
Answer: A - Tennessee SB 2005 removes the prior provision stating that notice will only be provided if unencrypted personal information has been breached. Under the state’s SB 2005, notice is provided regardless of whether the breached data was encrypted or unencrypted. 
 
Tennessee is among the first US states requiring notification of data breaches involving encrypted data.
Was this helpful? Upvote!
Login to contribute your own answer or details

Top questions

Related questions

Most popular on PracticeQuiz