IAPP CIPP / US Certified Information Privacy Professional Study Guide, 2nd Edition

Chapter 3Regulatory Enforcement

THE CIPP/US EXAM OBJECTIVES COVERED IN THIS CHAPTER INCLUDE:

• Domain I. Introduction to the U.S. Privacy Environment
  • I.A. Structure of U.S. Law
    • I.A.d Regulatory Authorities
  • I.B. Enforcement of U.S. Privacy and Security Laws
    • I.B.d Unfair and Deceptive Trade Practices (UDTP)
    • I.B.e Federal Enforcement Actions
    • I.B.f State Enforcement (Attorneys General (AG), California Privacy Protection Agency (CPPA))
    • I.B.h Self-Regulatory Enforcement (PCI, Trust Marks)

Many different regulators play a role in the enforcement of privacy laws and regulations. Depending on the nature of the regulation, the affected industries, and the geographic jurisdiction(s) involved, different federal, state, and industry regulators may have overlapping authority to protect the privacy of personal information.

In this chapter, you will learn about the federal agencies that play a major role in the enforcement of privacy regulations. You’ll also learn about the concept of unfair and deceptive trade practices and how that concept creates privacy obligations. Finally, you will learn about the other enforcement authorities that exist in state governments and self-regulatory groups.

Federal Regulatory Authorities

As you learned in Chapter 2, “Legal Environment,” the executive branch of the federal government bears responsibility for enforcing the laws enacted by the legislative ...