A Fine State of Mind
Which state does not have a breach notification regulation?
None
The NPI acronym in this regulation means this.
Nonpublic Information
FI is an abbreviation for this.
Financial Institutions
The letter W in WISP means that a this document needs to be this.
Written
FTC Section number which addresses Deceptive or Unfair Acts
Section 5
CCPA is the abbreviation for this recently passed regulation
California Consumer Protection Act
Data breach notification clause requires FIs to report breaches within this timeframe after discovery and evaluation.
72 hours
Cybersecurity Assessment Tool
This document is concise, includes definitions and its about the "what".
Policy
The approach of implementing regulations for specific industries is also called this
Sectoral
These states had regulations that were considered data protection laws in 2019, but in 2020 they were re-evaluated and considered too narrow to be proper data protection ones.
Nevada and Maine
This regulation requires this specific security control to address network access authentication.
Multi-factor
GLBA is enforced by this governmental organization
The FTC
This document provides the minimum control settings of the expected configuration of a system or process
Baselines
A practice that misleads a consumer is called this as per the FTC.
Deceptive (practice)
The regulation for this state was the first one of its kind in the country (not NY)
Massachusetts
An entity that operates under license, registration, charter of a banking law in NY.
Covered Entity
This GLBA rule focuses on ID theft prevention
This area of a policy focuses on roles and responsibilities
Governance
A practice that causes or is likely to cause substantial injury to consumers is called this as per the FTC.
Unfair (practice)
These states have straggled in developing and approving data protection regulations
South Dakota and Alabama (2018)
NPI's encryption requirements are based on this evaluation, as per this regulation
Risk Assessment
GLBA is also known under this less famous name.
Financial Services Modernization Act (of 1999)
This area of a policy addresses the "to whom" and "to what" such policy applies.
Scope
Only it can regulate the US Government.
The US Government