Question

which of the following help bust this myth? myth buster badges when submit. not complying with privacy laws can happen when personal information is collected, shared, or used improperly – even without a security incident. sending personal information (e.g., a misdirected email) to the wrong person can be a data privacy event. you only need to report an incident if more than a gigabyte of data ha accidentally shared. 3/4

Explanation:

To determine which options help bust the myth (likely a myth about data privacy incident reporting or scope), we analyze each:

• First option: Explains non - compliance with privacy laws can occur without a security incident, which helps bust a myth that maybe only security incidents matter for privacy law compliance.
• Second option: Shows that misdirecting personal info (like an email) is a data privacy event, busting a myth that maybe only certain types of data sharing are privacy events.
• Third option: This is incorrect as data privacy incident reporting is not based on the size of data (e.g., even a small amount of personal info misshared needs reporting), so it does not bust a myth but reinforces a wrong idea. So the correct options are the first and second.

Answer:

• $\square$ Not complying with privacy laws can happen when personal information is collected, shared, or used improperly – even without a security incident. (This option is correct)
• $\square$ Sending personal information (e.g., a misdirected email) to the wrong person can be a data privacy event. (This option is correct)
• $\square$ You only need to report an incident if more than a gigabyte of data has accidentally shared. (This option is incorrect)