Certified Information Privacy Professional – United States (CIPP/US) — Question 185

Which of the following most accurately describes the regulatory status of pandemic contact-tracing apps in the United States?

Answer options

• A. Contact tracing is covered exclusively under the Health Insurance Portability and Accountability Act (HIPAA).
• B. Contact tracing is regulated by the U.S. Centers for Disease Control and Prevention (CDC).
• C. Contact tracing is subject to a patchwork of federal and state privacy laws.
• D. Contact tracing is not regulated in the United States.

Correct answer: C

Explanation

The correct answer is C because contact tracing in the U.S. is indeed subject to a combination of federal and state laws, leading to varying regulations across different jurisdictions. Option A is incorrect since HIPAA does not exclusively cover contact tracing, and option B is misleading as the CDC provides guidance but does not regulate contact tracing directly. Option D is false because there are existing regulations, albeit inconsistent.