An Individual Whose Pii Has Been Stolen

Question: True or false? An individual whose PII has been stolen is susceptible to identity theft, fraud, and other damage.

Answer: ***True

False

Question: True or false? Information that has been combined with other information to link solely to an individual is considered PII.

Answer: ***True

False

Question: True or false? A System of Records Notice (SORN) is not required if an organization determines that PII will be stored using a system of records.

Answer: ***True

False

Question: What law establishes the public’s right to access federal government information?

Answer: DoD 5400.11-R: DoD Privacy Program

OMB Memorandum M-17-12: Preparing for and Responding to a Breach of Personally Identifiable Information

The Privacy Act of 1974

***The Freedom of Information Act (FOIA)

Question: Which action requires an organization to carry out a Privacy Impact Assessment?

Answer: Storing paper-based records

Collecting any CUI, including but not limited to PII

***Collecting PII to store in a new information system

Collecting PII to store in a National Security System

Question: An organization with an existing system of records decides to start using PII for a new purpose outside the “routine use” defined in the System of Records Notice (SORN). Is this a permitted use?

Answer: Yes

***No

Question: Which of the following are examples of PII?

Answer: ***Social Security Number (SSN)

***Driver’s License Number

***Fingerprint

First Pet’s Name

Question: Identify each law or regulation

Answer:

Question: The individual to whom the record pertains has submitted a written request for the information in question.

Answer: ***This use/disclosure is authorized.

This use/disclosure is NOT authorized.

Question: Your organization seeks to use the record for a routine use, as defined in the SORN.

Answer: ***This use/disclosure is authorized.

This use/disclosure is NOT authorized.