IAPP CIPP/C Exam Questions Instant Access

Question 1

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), when engaging in a third-party transfer of personal information for processing, an organization is expected to have the technology to protect the information during transit and to?

AEstablish a contract outlining the individual outsourcing arrangement.

BObtain additional consent for the use of the information by the third party.

CConfirm the jurisdictional protections of the receiving organization are the same as PIPEDA.

DReview the cross-border data flow competed and approved by the Treasury Board of Canada Secretariat.

Answer : A

Question 2

Oversight authorities allow the following types of consent EXCEPT?

AImplied consent at the time of collection.

BVerbal consent given to the person collecting the information.

CWritten consent included with the information that is collected.

DGeneral consent covering all activities associated with the personal information.

Answer : D

Question 3

According to the Voluntary Code of Conduct on the Responsible Development and Management of Advanced Generative AI Systems, signatories commit to doing all of the following EXCEPT?

AContributing to the development and application of Al standards.

BSharing information and best practices of Al governance.

CSupporting public awareness and education on Al.

DAdopting low-risk uses of AI.

Answer : D

Question 4

What is the primary motivation for a federal government entity to complete a Privacy Impact Assessment (PIA)?

AIntroducing new legislation in the House of Commons

BReceiving program approvals from the Treasury Board of Canada.

CObtaining program expertise from the Privacy Commissioner of Canada.

DImproving collection methods through its information technology systems.

Answer : B

Question 5

Of the key principles in the Personal Information Protection and Electronic Documents Act (PIPEDA), which principle in particular contributes to the increase in privacy policies in recent years?

ALimiting Use, Disclosure, and Retention.

BIndividual Access.

COpenness.

DAccuracy

Answer : C

Question 6

A company wants to invest in DEI initiatives within their organization and plans to survey employees by asking for locality, age, salary, gender, ethnicity, religion, sexual orientation, physical/mental disabilities, department, and job level.

The best solution to protect the personal information collected in the survey is to?

AUse a pseudonym to identify employees.

BChoose a survey tool located in Canada.

CEncrypt the sensitive information collected and stored.

DAdjust all survey question so that no identifying information nan he collected

Answer : D

Question 7

According to the Privacy Act, which of the following disclosures of personal information by a government institution would require the data subject's consent?

AWhen disclosing to a law enforcement body.

BWhen disclosing to comply with a search warrant.

CWhen disclosing to a registered charitable organization.

DWhen disclosing to a member of parliament to assist in resolving a problem.

Answer : C

IAPP Certified Information Privacy Professional/ Canada CIPP/C Exam Questions