8. What is the main purpose of the Fair Credit Reporting Act ("FCRA")? A. Increase the accuracy and fairness of credit reporting and limit the use of consumer reports to permissible purposes. B. Enable data reporters to efficiently report valid debts on a consumer's credit report. C. Allow employers to quickly access financial data of their employees. D. Increase the ability of the government to access consumer reports of suspected criminals. 9. The Health Insurance Portability and Accountability Act ("HIPAA") consists of which two rules to address the handling of protected health information ("PHI")? A. Transaction Rule and Minimum Use Rule. B. Privacy Rule and Security Rule. C. Privacy Rule and Breach Notification Rule. D. Security Rule and Minimum Use Rule. 10. Which of the following strategies is a company's best bet to avoid having to notify residents of a data breach involving personal information? A. Encrypt, using high-grade encryption, all personal information, including sensitive personal information. B. Purge all personal information after one year. C. Use a firewall and dual-layer authentication to protect all personal information. D. Ensure that all personal information is protected under the oversight of a privacy officer.

12. Which of the following agencies does NOT presently have the power to issue regulations related to consumer privacy? A. Federal Communication Commission ("FCC"). B. Federal Trade Commission ("FTC"). C. Office of the Comptroller of Currency ("OCC"). D. Consumer Financial Protection Bureau ("CFPB"). 13. Under the Electronic Communications Privacy Act ("ECPA"), when may a person lawfully monitor another's telephone call? A. When one of the parties to the call has given consent. B. Only when both parties to the call have given their consent. C. Ten days after providing notice of the monitoring to both parties of the call. D. Monitoring telephone calls is illegal under all circumstances.