Online Access Free CIPP-C Practice Test

According to the federal Privacy Commissioner, what protection is missing from the Privacy Act regarding outsourcing of government work that contains personal information?

• A.A statement granting the Privacy Commissioner the right to issue orders following an investigation into a possible data breach.
• B.A statement indicating that the government institution from which the information is outsourced remains accountable for its security.
• C.A statement requiring the government agency to complete a Privacy Impact Assessment (PIA) prior to outsourcing to a third party.
• D.A statement preventing the vendor to whom the information is outsourced to subcontract its processing.

Which case, brought before the Federal Court, helped determine that the Office of the Privacy Commissioner of Canada (OPC) had jurisdiction to investigate complaints about United States companies collecting, using and disclosing the personal information of individuals within Canada?

• A.Facebook: 2019.
• B.TJX Winners - Homesense.
• C.Abika.com.
• D.Blood Tribe.

Which of the following specifically differentiates between regular personal information and employee-related or work-product information?

• A.British Columbia's Personal Information Protection Act
• B.Personal Information Protection and Electronic Documents Act (PIPEDA).
• C.The Privacy Act.
• D.The Quebec Act.

What must a federal government department do before it implements an electronic service (e-service)?

• A.Determine if the Office of the Privacy Commissioner must be notified of the launch of this new e-service
• B.Conduct a preliminary PIA before acquiring the service
• C.Publish a privacy statement in newspapers and on the government website.
• D.Complete a PIA in accordance with Treasury Board guidelines.

ABC Corp uses a third-party provider to perform data analytics and sends the following data sets to the third party to run some reports: name, customer ID, age, transaction activity, transaction date, location, outcome, customer type.
If ABC Corp wants the third party to send all the data sets to their US based marketing partner for a new use, they must?

• A.Anonymize the personal data before sending.
• B.Encrypt data in transit.
• C.Seek additional consent from their customers.
• D.Ensure the marketing partner has equal or stronger protections than Canada.