CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ103

VerifiedSecurity and Risk Management

A leading Canadian pharmaceutical company has recently hired a Chief Data Officer (CDO) to manage its data-privacy program. The CDO finds that the company’s marketing department has collected information from individuals through the company website without their knowledge or consent. Which of the following privacy regulations should concern the CDO about this practice?

Explanation

PIPEDA is Canada’s federal private-sector privacy law for commercial activities. It generally requires organizations to obtain an individual’s meaningful knowledge and consent when collecting, using, or disclosing personal information; collecting website information without that knowledge and consent can therefore violate PIPEDA.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!