IAPP CIPP/C Exam Practice Test Instant Access

Question 1

According to the Privacy Act, which of the following disclosures of personal information by a government institution would require the data subject's consent?

AWhen disclosing to a law enforcement body.

BWhen disclosing to comply with a search warrant.

CWhen disclosing to a registered charitable organization.

DWhen disclosing to a member of parliament to assist in resolving a problem.

Answer : C

Question 2

Which is NOT a Canadian Standards Association (CSA) Privacy Principle?

APersonal information shall be protected by the same security safeguards regardless of the sensitivity of the information.

BThe purpose for which personal information is collected shall be identified by the organization at or before the time the information is collected.

CThe degree to which personal information must be kept accurate and complete is determined by whether its original purpose has been achieved.

DUpon request, an individual shall be informed of the existence, use and disclosure of their personal information and shall be given access to that information.

Answer : C

Question 3

What is a difference between the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Personal Information Privacy Act (PIPA) of both Alberta and British Columbia?

APIPEDA applies to personal information about individuals employed by government institutions; PIPA applies to personal information about individuals employed by public-sector organizations within the provinces.

BThe enforcement powers of the federal Privacy Commissioner of Canada under PIPEDA are greater than those of the provincial privacy commissioners under PIPA.

CPIPEDA applies to federal undertakings and to inter-provincial organizations engaged in commercial activities; PIPA applies to private organizations.

DThe person in charge of oversight of PIPEDA is a privacy commissioner; the person in charge of oversight of PIPA is an ombudsman.

Answer : C

Question 4

According to the federal Privacy Commissioner, what protection is missing from the Privacy Act regarding outsourcing of government work that contains personal information?

AA statement preventing the vendor to whom the information is outsourced to subcontract its processing.

BA statement granting the Privacy Commissioner the right to issue orders following an investigation into a possible data breach.

CA statement requiring the government agency to complete a Privacy Impact Assessment (PIA) prior to outsourcing to a third party.

DA statement indicating that the government institution from which the information is outsourced remains accountable for its security.

Answer : B

Question 5

In what situation is the federal Privacy Commissioner authorized to proceed to federal court?

AFor a determination on a ruling regarding privacy matters relating to the Charter of Rights and Freedom.

BFor a determination of whether or not personal information was properly withheld from release.

CFor a determination on a ruling by an administrative tribunal regarding privacy.

DFor a determination on a ruling by a provincial Privacy Commissioner.

Answer : B

Question 6

Which organization was the primary influence in the development of Canadian privacy with their publication of a set of eight privacy principles?

AThe Organization for Economic Co-operation and Development (OECD).

BThe Canadian Institute of Chartered Accountants

CThe Center for Democracy and Technology (CRT)

DThe Canadian Standards Association (CSA).

Answer : D

Question 7

What is the primary motivation for a federal government entity to complete a Privacy Impact Assessment (PIA)?

AIntroducing new legislation in the House of Commons

BReceiving program approvals from the Treasury Board of Canada.

CObtaining program expertise from the Privacy Commissioner of Canada.

DImproving collection methods through its information technology systems.

Answer : B

IAPP Certified Information Privacy Professional/ Canada CIPP/C Exam Practice Test