Under the California Consumer Privacy Act (as amended by the California Privacy Rights Act), a consumer may initiate a civil action against a business for?
A.
Any personal information that is subject to unauthorized access or disclosure.
B.
A security breach of certain categories of personal information that is nonencrypted and nonredacted.
C.
Failure to implement and maintain reasonable security procedures and practices to protect the personal information held.
D.
Failure to implement and maintain security practices set out in regulations issued by the California Privacy Protection Agency (CPPA).
The correct answer is:
B. A security breach of certain categories of personal information that is nonencrypted and nonredacted.
Reference:
The IAPP textbook, U.S. Private-Sector Privacy, 4th Edition, 2024, Section 6.2.4 Enforcement
"California does not include an expansive private right of action related to the consumer rights discussed in this chapter. Instead, California provides a limited private right of action related to security breaches that compromise personal information—as defined in California’s data breach notification law (see Chapter 7)—as well as usernames and passwords that permit access to accounts."
upvoted 2 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
twiny
3 weeks, 3 days ago