Online Access Free CIPP-C Practice Test

An Alberta resident has signed up for a health wellness "app" developed by a British Columbia based software provider that stores the data in British Columbia. The application has various non-healthcare related uses. The individual inputs their name and email address in the application to subscribe to health and wellness tips.
The collection and use of the individual's name and email address by the British Columbia based scheduling app would fall under what legislation?

• A.Alberta's Personal Information Protection Act (PIPA).
• B.Alberta's Freedom of Information and Protection of Privacy Act (FOIP).
• C.Alberta's Health Information Act (HIA).
• D.The Personal Information Protection and Electronic Documents Act (PIPEDA).

Which statement is TRUE regarding health information privacy laws in Canada?

• A.Obligations regarding accountability for health information are transferred when control is outsourced to a third party.
  B Emphasis is given lo personal information protection over the maintenance of the publicly funded healthcare system
• B.In provinces where there are no health information privacy statutes, a combination of the public health regulations and the private sector privacy legislation apply.
• C.There is a significant amount of variation among provinces regarding the definition of consent and how the consent requirement is addressed.

Under the Privacy Act, when government institutions collect personal information?

• A.Data subject consent is required.
• B.Information collected must be made anonymous where technologically possible
• C.The collection must relate to an operating program or activity.
• D.The collection must be directly from a data subject.

What is the Canadian Courts' role in reviewing decisions by provincial oversight authorities?

• A.Review all the investigative notes of the oversight authority, such as would be gathered during interviews.
• B.Impose a prison sentence only, such as when an employee sells personal health information (PHI) for their own gain.
• C.Look at specific types of errors made by the oversight authority such as a misinterpretation of a term in the legislation
• D.Review and compare the oversight authority's decision or recommendation against those of other oversight authorities across Canada.

Which of the following existing frameworks is least effective in addressing emerging AI issues while specific AI legislation is being decided?

• A.The Motor Vehicle Safety Act.
• B.The Criminal Code.
• C.The Canada Consumer Product Safety Act.
• D.The Copyright Act.