From the course: CCSP Cert Prep: 6 Legal, Risk, and Compliance Audio Review

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Cloud privacy and compliance Q&A

Cloud privacy and compliance Q&A

From the course: CCSP Cert Prep: 6 Legal, Risk, and Compliance Audio Review

Start my 1-month free trial

Cloud privacy and compliance Q&A

“

- [Instructor] Okay, here's a question about privacy laws similar to those you might find on the CCSP exam. (air whooshes) You are the Information Security Officer for a hospital system with operations in both the United states and Canada. You accept credit cards at your hospital. Which one of the following regulations is least likely to apply to you? Is it HIPAA, FERPA, PIPEDA, or PCIDSS? (air whooshes) (clock ticks) (air whooshes) (alarm rings) The answer is FERPA. FERPA governs student educational records, so it is least likely to apply in a hospital setting. HIPAA covers health care data in the United States, so it would apply here, as would PCIDSS for the credit card transaction that take place to pay for services. The hospital has operations in Canada, so PIPEDA would also apply. (air whooshes) Are you ready to move on? In the next section, I'll cover security policies. (electronic tones ring)

Contents