CIPP-CPreview

Which organization was the primary influence in the development of Canadian privacy with their publication of a set of eight privacy principles?

According to the federal court ruling in the Eastman Case, video cameras in the workplace are considered to be collecting personal information?

Which province requires its government bodies to store and access personal information exclusively in Canada unless additional consent is obtained, or if outside storage is judged necessary?

The movement toward comprehensive privacy and data protection laws can be attributed to a combination of three major factors: the need to remedy past injustices, the need to promote a digital economy and the need to ensure consistency with?

According to the Alberta Personal Information Protection Act, which of the following data breach reporting notifications to the commissioner is NOT automatically triggered when real risk of significant harm (RROSH) has been determined?

A commercial business in Canada is allowed to collect personal information without the knowledge or consent of the individual in all of the following circumstances EXCEPT when?

Which of these employees would be subject to the Personal Information Protection and Electronic Documents Act (PIPEDA)?

Which statement is TRUE regarding health information privacy laws in Canada?

Which is NOT a Canadian Standards Association (CSA) Privacy Principle?

A federally regulated company based in Ontario has customers in Ontario, Quebec, New Brunswick, Alberta and British Columbia. Unfortunately, a third-party vendor that provides marketing support to the company experiences a privacy breach which impacts the personal information of all its customers across the provinces where it operates.
The Privacy Officer determines that the breach causes a real risk of significant harm to their customers and is tasked with reporting the breach to the relevant regulators.
With which provincial privacy regulators does the company have to file a report?

According to the federal Privacy Commissioner, what protection is missing from the Privacy Act regarding outsourcing of government work that contains personal information?

In which situation could a request for access to one’s personal information be denied under the Privacy Act?

What must a federal government department do before it implements an electronic service (e-service)?

What can be concluded from the Blood Tribe case regarding the Privacy Commissioner's access to information?

Which of the following existing frameworks is least effective in addressing emerging AI issues while specific AI legislation is being decided?

What is required through the "circle of care" concept under Canadian health information privacy law?

Which of the following specifically differentiates between regular personal information and employee-related or work-product information?

Under PIPEDA, each of the following situations requires an organization to obtain express consent to use personal information EXCEPT?

What is required for a provincial law to be considered substantially similar to the Personal Information Protection and Electronic Documents Act (PIPEDA)?

According to the Voluntary Code of Conduct on the Responsible Development and Management of Advanced Generative AI Systems, signatories commit to doing all of the following EXCEPT?

The Government of Canada’s Directive on Privacy Impact Assessments applies to all of the following EXCEPT?

A company wants to invest in DEI initiatives within their organization and plans to survey employees by asking for locality, age, salary, gender, ethnicity, religion, sexual orientation, physical/mental disabilities, department, and job level.
The best solution to protect the personal information collected in the survey is to?

According to the Privacy Act, which of the following disclosures of personal information by a government institution would require the data subject’s consent?

Under PIPEDA, each of the following are considered to be personal information EXCEPT?