Question 1

Information is generated when a person buys goods or services at a store .

Accepted Answer

When a person buys goods or services at a store, information such as the type of goods or services purchased, the quantity, the price, and the time of the transaction is generated. This information can be used for inventory management, sales tracking, and customer behavior analysis.

Question 2

The vast majority of business transactions are anonymous .

Accepted Answer

Most business transactions are not anonymous; they typically require some level of identification or record-keeping for accountability, legal compliance, and trust between parties.

Question 3

American privacy laws are much stricter than European privacy laws .

Accepted Answer

European privacy laws, particularly the General Data Protection Regulation (GDPR), are generally considered to be more comprehensive and stricter than American privacy laws, which are more sector-specific and less uniform.

Question 4

The United States has not adopted the OECD principles .

Accepted Answer

The United States has not adopted the OECD principles because it has not signed the OECD Convention on Combating Bribery of Foreign Public Officials in International Business Transactions.

Question 5

The United States provides limited enforcement of OECD principles .

Accepted Answer

The United States, as a member of the OECD, commits to the principles set forth by the organization but enforcement of these principles can be limited due to national sovereignty, variations in domestic laws, and prioritization of national interests over international guidelines.

Question 6

A company can place a cookie on your computer even if you've never visited its web site .

Accepted Answer

This can happen through third-party cookies, which are placed by a website other than the one you are currently visiting, often through ads or embedded content.

Question 7

A third-party cookie is initiated by a direct request from the user .

Accepted Answer

A third-party cookie is created by a domain other than the one the user is currently visiting; it's typically used for tracking and online-advertising purposes, not initiated by a direct request from the user.

Question 8

Cookies can be used to track your online travels by using ad placement on various web sites .

Accepted Answer

Cookies can track user activity across different websites to tailor advertisements based on browsing history, thereby effectively tracking online travels.

Question 9

In contrast to the "omnibus"solution of adopting the OECD list, the United States uses an approach called "sectoral"which means that it passes laws to deal with specific industries (that is, business sectors) or practices .

Accepted Answer

The United States employs a sectoral approach to data privacy, meaning it enacts laws targeting specific industries or practices, rather than adopting a comprehensive, all-encompassing framework like the OECD guidelines.

Question 10

Messages that are encrypted using a public key RSA129 cryptosystem have, to date, not yet been cracked .

Accepted Answer

RSA-129 was famously cracked in 1994 through a collaborative effort that demonstrated the vulnerability of the encryption method to sufficiently organized computational efforts.

Question 11

The Do Not Call List was so successful that it has now been applied to email .

Accepted Answer

The Do Not Call List applies to telephone calls and does not extend to email. Email spam is regulated under laws like the CAN-SPAM Act in the United States, which sets rules for commercial email.

Question 12

Identity theft is the crime of posing as someone else for fraudulent purposes .

Accepted Answer

Identity theft involves stealing someone's personal information to commit fraud, such as opening credit accounts, taking out loans, or making purchases in the victim's name.

Question 13

Partial backups should be made more often than full backups .

Accepted Answer

Partial backups, which only include data that has changed since the last backup, are typically smaller and faster to perform than full backups. Therefore, they can be made more frequently to ensure data is up-to-date without the time and storage requirements of a full backup.

Question 14

Emptying the Trash on your computer guarantees that the data has been erased .

Accepted Answer

Emptying the Trash or Recycle Bin on your computer does not guarantee that the data has been permanently erased. It simply removes the file's reference from the file system, making the space available for new data. The original data may remain on the hard drive until it is overwritten.

Question 15

Laws in Hong Kong controlling the use of transaction information are stricter than those in the United States .

Accepted Answer

Hong Kong has implemented comprehensive data protection laws under the Personal Data (Privacy) Ordinance (PDPO), which includes strict regulations on the use of personal data in transactions, offering more stringent protections compared to the more sector-specific and fragmented approach to data privacy in the United States.

Question 16

The difference between a worm and a virus is that the worm program rides along with other software, while the virus can actually send itself to other devices on the Internet .

Accepted Answer

A worm is a type of malware that can replicate itself and spread to other devices on the network without human intervention, while a virus typically attaches itself to a host file or program and requires some form of user interaction (like running an infected program) to spread.

Question 17

Non European countries that want information on European citizens must show that they have privacy laws consistent with OECD principles .

Accepted Answer

Non-European countries must demonstrate that their privacy laws are consistent with the OECD (Organization for Economic Co-operation and Development) principles, which emphasize the protection of personal data, the rights of individuals, and the limitation of data use to fulfill the purpose for which it was collected, among other things. This is to ensure that European citizens' data is protected to a standard similar to that within the EU, especially under regulations like GDPR (General Data Protection Regulation).

Question 18

Opt-in means that a business can use the item selected unless the user explicitly prohibits the new use .

Accepted Answer

Opt-in means that a user must explicitly give permission or agree to something (like receiving newsletters or sharing data) before a business can use the item selected or engage in the activity.

Question 19

Modern browsers allow the user to control the cookie policy for a computer .

Accepted Answer

Modern browsers provide settings that allow users to control how cookies are handled, including blocking or allowing them from specific sites or in general.

Question 20

In the United States the protection of an individual's privacy is the responsibility of the U . S . government .

Accepted Answer

While the U.S. government does enact laws and regulations to protect privacy, the responsibility also falls on state governments, private entities, and individuals themselves to ensure privacy protection.

Quiz 12: Privacy and Digital Security