CIPP/US case studies
CIPP/US · Put your knowledge to work in context.
The Certified Information Privacy Professional/United States (CIPP/US) is a professional credential, offered by the International Association of Privacy Professionals (IAPP), that demonstrates a working command of U.S. It is aimed at privacy practitioners, compliance and legal staff, security and IT professionals, consultants, and others whose work touches the collection, use, disclosure, or protection of personal information in a U.S. The CIPP/US case studies are 5 cases and about 2,696 words.
1The Telehealth App That Promised More Than HIPAA Requires
Fernwell is a 40-person telehealth startup selling a mood-tracking app. Its privacy policy, written by a contractor, states: 'We are HIPAA compliant and never share your data with advertisers.' In fact, an analytics SDK embedded in the app transmits device identifiers and mood-journal free text to three ad networks, which use it for lookalike targeting.
490 words, about 2 min2RentGuard's 'Informational Tool' and the FCRA Label Problem
RentGuard sells a 'Tenant Reliability Score' to small landlords for $12 per report. The score blends eviction-court filings, utility payment history bought from a data broker, social-media sentiment analysis, and a landlord's own notes.
497 words, about 2 min3Four Requests, One Morning: Cassio's SCA Triage
cloud-storage provider. Its trust-and-safety team receives four items on the same morning from a federal agent: (1) an administrative subpoena under 18 U.S.C.
497 words, about 2 min4Ridgeline Logistics: Dashcams, Slack, and a Personal iCloud
Ridgeline Logistics runs 40 delivery vans out of Sacramento and Fresno. In one month it has: (a) installed dashcams that continuously record audio inside the cab; (b) required drivers to install an app on their personal phones that logs GPS even off-shift and reads the contact list; (c) enabled keyword monitoring on the company Slack workspace, which includes a #drivers-united channel where employees discuss pay and an upcoming union election; and (d) asked IT to pull a driver's personal iCloud backup after he emailed a customer list to his own Gmail.
519 words, about 3 min5Lumenwise: Thresholds, Pixels, and Employee Data in California
Lumenwise is a Texas-based B2B software company with $60 million in annual revenue. It has 900 California employees and applicants, 15,000 California business contacts, and a marketing site receiving 140,000 unique California visitors per month.
693 words, about 3 min