IAPP CIPP-C - Certified Information Privacy Professional/Canada (CIPP/C) Exam
Page: 3 / 16
Total 76 questions
Question #11 (Topic: Exam A)
A company wants to invest in DEI initiatives within their organization and plans to survey employees by asking for locality, age, salary, gender, ethnicity, religion, sexual orientation, physical/mental disabilities, department, and job level.
The best solution to protect the personal information collected in the survey is to?
The best solution to protect the personal information collected in the survey is to?
A. Use a pseudonym to identify employees.
B. Choose a survey tool located in Canada.
C. Encrypt the sensitive information collected and stored.
D. Adjust all survey questions so that no identifying information can be collected.
Answer: D
Question #12 (Topic: Exam A)
What must an organization do to fulfill the Personal Information Protection and Electronic Documents Act’s (PIPEDA) transparency requirements when transferring personal information to a foreign country?
A. Inform customers if data is to be transferred outside of Canada and solicit additional consent.
B. Give individuals with an existing business relationship the right to refuse transfer of their information.
C. Advise customers that their data may be accessed by another jurisdiction's courts or law enforcement.
D. Provide new customers with a measure-by-measure comparison of relevant foreign laws with Canadian laws.
Answer: C
Question #13 (Topic: Exam A)
Which case, brought before the Federal Court, helped determine that the Office of the Privacy Commissioner of Canada (OPC) had jurisdiction to investigate complaints about United States companies collecting, using and disclosing the personal information of individuals within Canada?
A. TJX Winners - Homesense.
B. Facebook: 2019.
C. Blood Tribe.
D. Abika.com.
Answer: D
Question #14 (Topic: Exam A)
A private sector daycare’s portal for parents stores their children’s photos, allergy information and date of birth. A parent has asked about the portal’s security requirements and in three months still not has received an answer. What is missing from the daycare’s procedures?
A. Ensuring transparency.
B. Responding to the parent's request within 30 days.
C. Ensuring strong encryption and security measures.
D. Completing a real risk of significant harm assessment (RROSH).
Answer: B
Question #15 (Topic: Exam A)
Which act also includes references to the Privacy Act?
A. The Access to Information Act.
B. The Children’s Online Privacy Protection Act (COPPA).
C. The Telecommunications Intercept and Access (TIA) Act.
D. The Personal Information Protection and Electronic Documents Act (PIPEDA).
Answer: A
