IAPP IAPP Certifications CIPP-C Questions & Answers

• Question 171:

  Under the Privacy Act, when government institutions collect personal information?

  A. Data subject consent is required.

  B. The collection must be directly from a data subject.

  C. The collection must relate to an operating program or activity.

  D. Information collected must be made anonymous where technologically possible.

  Correct Answer: C

• Question 172:

  ABC Corp uses a third-party provider to perform data analytics and sends the following data sets to the third party to run some reports: name, customer ID, age, transaction activity, transaction date, location, outcome, customer type. If ABC Corp wants the third party to send all the data sets to their US based marketing partner for a new use, they must?

  A. Encrypt data in transit.

  B. Anonymize the personal data before sending.

  C. Seek additional consent from their customers.

  D. Ensure the marketing partner has equal or stronger protections than Canada.

  Correct Answer: C

• Question 173:

  In comparing British Columbia's privacy laws with the health information privacy acts of the remaining provinces, BC's privacy laws?

  A. Seek to create a more flexible regulatory system to manage the patient data itself.

  B. Refer to health sector participants as trustees as opposed to custodians.

  C. Exclude laboratories, nursing homes and independent health facilities.

  D. Group data banks together rather than listing them separately.

  Correct Answer: A

• Question 174:

  According to PIPEDA, all of the following data is considered sensitive: physical disability, ethnicity, sexual orientation and?

  A. Age

  B. Gender

  C. Locality

  D. Religion

  Correct Answer: D

• Question 175:

  To whom does the Privacy Commissioner of Canada report?

  A. Supreme Court of Canada and Prime Minister.

  B. House of Commons and the Senate.

  C. Administrative tribunal.

  D. Auditor General.

  Correct Answer: B

• Question 176:

  In which situation could a request for access to one's personal information be denied under the Privacy Act?

  A. The personal information was collected by the Royal Canadian Mounted Police while performing policing services for a province or municipality.

  B. The personal information was obtained in confidence from a foreign state or agency which has consented to the disclosure of the information.

  C. The release of the personal information could reasonably be expected to cause injury to a protected species of wildlife.

  D. The personal information is more than 20 years old and relates to the detection or suppression of money laundering.

  Correct Answer: C

• Question 177:

  What must a federal government department do before it implements an electronic service (e-service)?

  A. Conduct a preliminary PIA before acquiring the service

  B. Complete a PIA in accordance with Treasury Board guidelines.

  C. Publish a privacy statement in newspapers and on the government website.

  D. Determine if the Office of the Privacy Commissioner must be notified of the launch of this new e-service

  Correct Answer: B

• Question 178:

  What is critical to consider when an organization responsible for a large number of records wants to outsource the storage of those records?

  A. Determining if the personal information stored on the records will be used for data matching.

  B. Putting into place a contractual agreement between the organization and the records storage company.

  C. Conducting a Privacy Impact Assessment (PIA) prior to establishing a relationship with the storage company.

  D. Establishing that consent gathered from individuals by the organization in order to store their personal information was informed and meaningful.

  Correct Answer: B

• Question 179:

  In 2007, four employees of TELUS Communications Corporation filed a complaint with the Privacy Commissioner of Canada in connection with the collection of what personal information?

  A. Voiceprint information.

  B. Drivers

  Correct Answer: C

• Question 180:

  Of the key principles in the Personal Information Protection and Electronic Documents Act (PIPEDA), which principle in particular contributes to the increase in privacy policies in recent years?

  A. Limiting Use, Disclosure, and Retention.

  B. Individual Access.

  C. Openness.

  D. Accuracy.

  Correct Answer: C