CIPP/C: Certified Information Privacy Professional/Canada

By IAPP · Question Mode

QuestionQ6

Canadian Privacy Laws and Practices in the Private Sector

Under Alberta’s Personal Information Protection Act, which of the following data-breach reporting notifications to the Commissioner is not automatically required once a real risk of significant harm (RROSH) has been determined?

Explanation

Section 19 of Alberta’s Personal Information Protection Act Regulation requires the written breach notice to state the personal information involved, an estimate of affected individuals at real risk of significant harm, steps taken to reduce the risk of harm, and steps the organization has taken to notify individuals. It does not prescribe a description of future steps the organization will take to notify affected individuals.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!