Certified Information Privacy Professional – United States (CIPP/US) — Question 158

Which of the following is commonly required for an entity to be subject to breach notification requirements under most state laws?

Answer options

• A. The entity must conduct business in the state
• B. The entity must have employees in the state
• C. The entity must be registered in the state
• D. The entity must be an information broker

Correct answer: A

Explanation

The correct answer is A because most state laws stipulate that an entity must conduct business within the state to be subject to breach notification requirements. Options B, C, and D do not universally apply, as having employees, being registered, or being classified as an information broker are not consistent prerequisites across different states.