Certified Information Privacy Manager (CIPM) — Question 21

Which is TRUE about the scope and authority of data protection oversight authorities?

Answer options

• A. The Office of the Privacy Commissioner (OPC) of Canada has the right to impose financial sanctions on violators.
• B. All authority in the European Union rests with the Data Protection Commission (DPC).
• C. No one agency officially oversees the enforcement of privacy regulations in the United States.
• D. The Asia-Pacific Economic Cooperation (APEC) Privacy Frameworks require all member nations to designate a national data protection authority.

Correct answer: C

Explanation

The correct answer is C because there is indeed no central agency in the U.S. responsible for privacy law enforcement, which is handled by various sector-specific regulators. Option A is incorrect as the OPC does not have the authority to impose financial sanctions; option B is misleading since the DPC is one of several authorities; and option D is inaccurate because the APEC Privacy Frameworks do not enforce a requirement for national authorities.