IAPP CIPP/C Exam Questions Instant Access

Question 1

Which of the following specifically differentiates between regular personal information and employee-related or work-product information?

AThe Privacy Act.

BThe Quebec Act.

CBritish Columbia's Personal Information Protection Act

DPersonal Information Protection and Electronic Documents Act (PIPEDA).

Answer : D

Question 2

Under PIPEDA, each of the following are considered to be personal information EXCEPT?

AA public official's salary published on a government web site.

BA person's telephone number published in a public directory.

CA photograph taken in public and published in a newspaper.

DInformation about a defendant contained in court records.

Answer : A

Question 3

A small commercial business in Canada was preparing a mailing to its customers when the letters and the envelopes were mismatched, causing 500 of 1000 letters to be sent to the wrong recipients. The letters contained the name and mailing address of the clients as well as account numbers and account balances.

The business has discovered this error as clients called to report receiving the wrong letter and expressing concern that their information has been breached. Which of the following is the most appropriate next step to take?

AAll 1000 clients must be sent new letters.

BThe 500 clients who were impacted must be immediately notified.

CThe Office of the Privacy Commissioner (OPC) must be immediately notified.

DA risk assessment must be completed to determine the real risk of significant harm (RROSH) to the clients.

Answer : D

Question 4

What is the primary motivation for a federal government entity to complete a Privacy Impact Assessment (PIA)?

AIntroducing new legislation in the House of Commons

BReceiving program approvals from the Treasury Board of Canada.

CObtaining program expertise from the Privacy Commissioner of Canada.

DImproving collection methods through its information technology systems.

Answer : B

Question 5

What is a difference between the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Personal Information Privacy Act (PIPA) of both Alberta and British Columbia?

APIPEDA applies to personal information about individuals employed by government institutions; PIPA applies to personal information about individuals employed by public-sector organizations within the provinces.

BThe enforcement powers of the federal Privacy Commissioner of Canada under PIPEDA are greater than those of the provincial privacy commissioners under PIPA.

CPIPEDA applies to federal undertakings and to inter-provincial organizations engaged in commercial activities; PIPA applies to private organizations.

DThe person in charge of oversight of PIPEDA is a privacy commissioner; the person in charge of oversight of PIPA is an ombudsman.

Answer : C

Question 6

The Government of Canada's Directive on Privacy Impact Assessments applies to all of the following EXCEPT?

AThe Ministry of Health

BThe Bank of Canada.

CCrown Corporations.

DThe Cabinet.

Answer : D

Question 7

According to the federal Privacy Commissioner, what protection is missing from the Privacy Act regarding outsourcing of government work that contains personal information?

AA statement preventing the vendor to whom the information is outsourced to subcontract its processing.

BA statement granting the Privacy Commissioner the right to issue orders following an investigation into a possible data breach.

CA statement requiring the government agency to complete a Privacy Impact Assessment (PIA) prior to outsourcing to a third party.

DA statement indicating that the government institution from which the information is outsourced remains accountable for its security.

Answer : B

IAPP Certified Information Privacy Professional/ Canada CIPP/C Exam Questions