Certified Information Privacy Professional/ Canada (CIPP/C) (CIPP-C) Free Practice Test

Question 1

In 2007, four employees of TELUS Communications Corporation filed a complaint with the Privacy Commissioner of Canada in connection with the collection of what personal information?

A. Urine samples.

B. Voiceprint information.

C. Video images.

D. Drivers' licenses.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

A federally regulated company based in Ontario has customers in Ontario, Quebec, New Brunswick, Alberta and British Columbia. Unfortunately, a third-party vendor that provides marketing support to the company experiences a privacy breach which impacts the personal information of all its customers across the provinces where it operates.
The Privacy Officer determines that the breach causes a real risk of significant harm to their customers and is tasked with reporting the breach to the relevant regulators.
With which provincial privacy regulators does the company have to file a report?

A. Quebec and Alberta only

B. It is unnecessary to file a report with any provinces because the company is federally regulated

C. New Brunswick and British Columbia only

D. All of the provinces where its customers are located

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Oversight authorities allow the following types of consent EXCEPT?

A. Written consent included with the information that is collected.

B. Verbal consent given to the person collecting the information.

C. Implied consent at the time of collection.

D. General consent covering all activities associated with the personal information.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Which of the following describes a difference between the federal Privacy Commissioner and provincial commissioners?

A. The federal commissioner must receive complaints from a legislative representative.

B. Provincial commissioners can order an organization to act.

C. Provincial commissioners are limited to recommending actions.

D. The federal commissioner has the power to make an organization comply.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

When a third country or specified entity is said to ensure an adequate level of protection essentially equivalent to that ensured within the European Union, it is awarded a(n)?

A. Adequacy designation.

B. Equivalency designation.

C. Protection designation.

D. Attestation designation.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which of the following incidents will require reporting to OPC?

A. As part of a freedom of information request, a nursing home that released an e-mail with everybody's e-mail address in the "to" section unredacted.

B. A file with client ID, sales amount and sales date that was sent to the wrong processors who cannot identify the clients.

C. An organization's point-of-sale system that was subject to an attempted hack that was blocked by the organization's firewall.

D. A sales report with aggregated information that was sent to the wrong person internally.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

What is a difference between the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Personal Information Privacy Act (PIPA) of both Alberta and British Columbia?

A. PIPEDA applies to personal information about individuals employed by government institutions; PIPA applies to personal information about individuals employed by public-sector organizations within the provinces.

B. The enforcement powers of the federal Privacy Commissioner of Canada under PIPEDA are greater than those of the provincial privacy commissioners under PIPA.

C. The person in charge of oversight of PIPEDA is a privacy commissioner; the person in charge of oversight of PIPA is an ombudsman.

D. PIPEDA applies to federal undertakings and to inter-provincial organizations engaged in commercial activities; PIPA applies to private organizations.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Why is biometric information considered sensitive personal information in almost all circumstances?

A. It is easy to recognize and reproduce with increasing computer processing power.

B. It is distinctive, unlikely to vary overtime, difficult to change and largely unique to the individual.

C. It is user specific information that can easily be stored and accessed to identify an individual or group of individuals.

D. It can be applied broadly to link many pieces of personal information and creates security vulnerabilities.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

IAPP Certified Information Privacy Professional/ Canada (CIPP/C) (CIPP-C) Free Practice Test