Certified Information Privacy Professional – United States (CIPP/US) — Question 44

Mega Corp. is a U.S.-based business with employees in California, Virginia, and Colorado. Which of the following must Mega Corp. comply with in regard to its human resources data?

Answer options

• A. California Privacy Rights Act.
• B. California Privacy Rights Act and Virginia Consumer Data Protection Act.
• C. California Privacy Rights Act and Colorado Privacy Act.
• D. California Privacy Rights Act, Virginia Consumer Data Protection Act, and Colorado Privacy Act.

Correct answer: A

Explanation

The correct answer is A because the California Privacy Rights Act specifically applies to businesses that handle personal data of California residents. While Virginia and Colorado have their own privacy laws, they do not apply to Mega Corp. since the question asks for what it must comply with regarding its HR data, which is primarily governed by California law in this context.