IAPP CIPP-C Online Practice Questions and Exam Preparation

IAPP CIPP-C Online Questions & Answers

• Question 11:

  An Alberta resident has signed up for a health wellness "app" developed by a British Columbia based software provider that stores the data in British Columbia. The application has various non-healthcare related uses. The individual inputs their name and email address in the application to subscribe to health and wellness tips. The collection and use of the individual's name and email address by the British Columbia based scheduling app would fall under what legislation?

  A. Alberta's Health Information Act (HIA).
  B. Alberta's Personal Information Protection Act (PIPA).
  C. Alberta's Freedom of Information and Protection of Privacy Act (FOIP).
  D. The Personal Information Protection and Electronic Documents Act (PIPEDA).
  D. The Personal Information Protection and Electronic Documents Act (PIPEDA).

• Question 12:

  Under the Freedom of Information and Protection of Privacy Acts (FIPPA), personal information includes all of the following EXCEPT?

  A. Information about an individual's home business.
  B. Information about an individual's creditworthiness.
  C. Information about an individual's employment history.
  D. Information about an individual's character references.
  A. Information about an individual's home business.

• Question 13:

  What is required of a private sector organization that is subject to a finding by a Canadian federal or provincial Privacy Commissioner?

  A. In Québec, comply with the finding as a binding decision.
  B. Comply with findings of the Privacy Commissioner of Canada only.
  C. In all jurisdictions, adopt and apply the finding within 30 days of the published report.
  D. In Ontario only, apply for judicial review within a provincial court in order to accept or refute the finding.
  A. In Québec, comply with the finding as a binding decision.

• Question 14:

  In 2007, four employees of TELUS Communications Corporation filed a complaint with the Privacy Commissioner of Canada in connection with the collection of what personal information?

  A. Voiceprint information.
  B. Drivers’ licenses.
  C. Urine samples.
  D. Video images.
  C. Urine samples.

• Question 15:

  Which venture would be subject to the requirements of Section 5 of the Federal Trade Commission Act?

  A. A local nonprofit charity's fundraiser
  B. An online merchant's free shipping offer
  C. A national bank's no-fee checking promotion
  D. A city bus system's frequent rider program
  B. An online merchant's free shipping offer

• Question 16:

  Work-product information is generally thought of as information about an individual that?

  A. Is required by an organization to establish an employment relationship.
  B. Includes internal investigation files and complaints filed about an employee.
  C. Includes intellectual property developed within the scope of an employee's job function.
  D. Is prepared or collected as part of that individual's responsibilities or activities in connection to their job.
  D. Is prepared or collected as part of that individual's responsibilities or activities in connection to their job.

• Question 17:

  In which circumstance do private sector privacy laws permit collection of information without consent?

  A. When timely consent cannot be obtained by the organization and the collection is clearly in the individual's interests.
  B. When the collection is necessary for the organization to complete a profile of the individual.
  C. When the collection is reasonable for purposes related to the organization's mandate.
  D. When the individual expressly waives their right to give consent.
  A. When timely consent cannot be obtained by the organization and the collection is clearly in the individual's interests.

• Question 18:

  Under the Personal Information Protection and Electronic Documents Act (PIPEDA), an organization must maintain a record of every breach of security safeguards involving personal information for a minimum of?

  A. 3 months.
  B. 12 months.
  C. 24 months.
  D. 36 months.
  C. 24 months.

• Question 19:

  The rules for "e-discovery" mainly prevent which of the following?

  A. A conflict between business practice and technological safeguards
  B. The loss of information due to poor data retention practices
  C. The practice of employees using personal devices for work
  D. A breach of an organization's data retention program
  B. The loss of information due to poor data retention practices

• Question 20:

  Within what time period must a commercial message sender remove a recipient's address once they have asked to stop receiving future e-mail?

  A. 7 days
  B. 10 days
  C. 15 days
  D. 21 days
  B. 10 days