IAPP CIPP-C CIPP/C Exam Practice Test Instant Access

Question 1

In comparing British Columbia's privacy laws with the health information privacy acts of the remaining provinces, BC's privacy laws?

ASeek to create a more flexible regulatory system to manage the patient data itself

BRefer to health sector participants as trustees as opposed to custodians.

CExclude laboratories, nursing homes and independent health facilities.

DGroup data banks together rather than listing them separately.

Answer : A

Question 2

What must a federal government department do before it implements an electronic service (e-service)?

AConduct a preliminary PIA before acquiring the service

BComplete a PIA in accordance with Treasury Board guidelines.

CPublish a privacy statement in newspapers and on the government website.

DDetermine if the Office of the Privacy Commissioner must be notified of the launch of this new e-service

Answer : B

Question 3

In which circumstance do private sector privacy laws permit collection of information without consent?

AWhen timely consent cannot be obtained by the organization and the collection is clearly in the individual's interests.

BWhen the collection is necessary for the organization to complete a profile of the individual.

CWhen the collection is reasonable for purposes related to the organization's mandate.

DWhen the individual expressly waives their right to give consent.

Answer : A

Question 4

According to the federal Privacy Commissioner, what protection is missing from the Privacy Act regarding outsourcing of government work that contains personal information?

AA statement preventing the vendor to whom the information is outsourced to subcontract its processing.

BA statement granting the Privacy Commissioner the right to issue orders following an investigation into a possible data breach.

CA statement requiring the government agency to complete a Privacy Impact Assessment (PIA) prior to outsourcing to a third party.

DA statement indicating that the government institution from which the information is outsourced remains accountable for its security.

Answer : B

Question 5

A federally regulated company based in Ontario has customers in Ontario, Quebec, New Brunswick, Alberta and British Columbi

a. Unfortunately, a third-party vendor that provides marketing support to the company experiences a privacy breach which impacts the personal information of all its customers across the provinces where it operates.

The Privacy Officer determines that the breach causes a real risk of significant harm to their customers and is tasked with reporting the breach to the relevant regulators.

With which provincial privacy regulators does the company have to file a report?

AIt is unnecessary to file a report with any provinces because the company is federally regulated

BAll of the provinces where its customers are located

CNew Brunswick and British Columbia only

DQuebec and Alberta only

Answer : A

Question 6

Under the Freedom of Information and Protection of Privacy Acts (FIPPA), personal information includes all of the following EXCEPT?

AInformation about an individual's home business.

BInformation about an individual's creditworthiness.

CInformation about an individual's employment history.

DInformation about an individual's character references.

Answer : A

Question 7

What is a difference between the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Personal Information Privacy Act (PIPA) of both Alberta and British Columbia?

APIPEDA applies to personal information about individuals employed by government institutions; PIPA applies to personal information about individuals employed by public-sector organizations within the provinces.

BThe enforcement powers of the federal Privacy Commissioner of Canada under PIPEDA are greater than those of the provincial privacy commissioners under PIPA.

CPIPEDA applies to federal undertakings and to inter-provincial organizations engaged in commercial activities; PIPA applies to private organizations.

DThe person in charge of oversight of PIPEDA is a privacy commissioner; the person in charge of oversight of PIPA is an ombudsman.

Answer : C

IAPP CIPP-C Certified Information Privacy Professional/ Canada CIPP/C Exam Practice Test