Certified Information Privacy Professional – United States (CIPP/US) — Question 209

Which of the following state laws has an entity exemption for organizations subject to the Gramm-Leach-Bliley Act (GLBA)?

Answer options

• A. Nevada Privacy Law.
• B. California Privacy Rights Act.
• C. California Consumer Privacy Act.
• D. Virginia Consumer Data Protection Act

Correct answer: D

Explanation

The Virginia Consumer Data Protection Act includes an exemption for organizations that are already compliant with the Gramm-Leach-Bliley Act, allowing them to avoid duplicative regulations. In contrast, the other laws listed do not provide such specific exemptions, making them less relevant in this context.