CIPP\C exam Flashcards
Along with the Senate, what is the other Canadian Federal Parliamentary Chamber?
House of Commons
Which of the following is a responsibility of the Canadian Federal Government?
Banking
Along with transparency, what other major issue was cited by the Privacy Commissioner of Canada report about the Facebook complaint filled by the Canadian Internet Policy and Public Interest clinic?
Consent
Which Provincial health law has been deemed substantially similar to the Personal Information and Electronic Documents Act (PIPEDA)?
Ontario’s Personal Health Information Protection Act (PHIPA)
What is the Primary purpose of the Info Source?
To assist individuals in exercising their rights under the Access to Information Act and the Privacy Act
In 2010, which organization’s social networking tool prompted the privacy commissioner of Canada to call on the company to be more accountable for the personal information it controlled.
Which of the following is guaranteed by the Section 7 of the Canadian Charter of Rights and Freedoms?
Life, Liberty and Security of the person
Which statement about the application of consent principles in Canada is NOT true?
The Personal Information Protection and Electronic Documents Act is the only Canadian Law that explicitly deals with the requirement for consent
What factor determines the extent of privacy impact assessment (PIAs) conducted by government institutions in compliance with the Directive on Privacy Impact Assessment?
The level of risk
Which is NOT a risk factor that government officials must evaluate when framing an outsourcing contract that involves personal or sensitive information?
The number of data elements involved
In Canadian Provinces that do not have a privacy commissioner, which office is responsibel for oversight of privacy?
Ombudsperson
Which is a remedy the Office of the Privacy Commissioner of Canada has after investigating complaints about violations of the Privacy Act?
Recommend solutions to government institutions
Which organization published the “model code for the Protection of Personal Information” in 1996?
Canadian Standards Association
Which Canadian Institution issued a policy requiring that each federal government institution establish measures to ensure that the government institution “ meets the requirements of the Privacy Act when contracting with private-sector organizations, or when establishing agreements or arrangements with public-sector organizations”?
The treasury Board of Canada
Which of the following is NOT a term that refers to a health sector participant, such as hospitals, nursing homes or pharmacies?
Provider ( correct terms are custodian, trustee, Health Information custodian)
Under the Privacy Act, nonconsensual disclosure of personal information is permitted in all of the following EXCEPT:
For the purpose of assisting the individual in resolving a problem by a member of provincial government
Which is NOT a valid reason for denying a Canadian Citizen access to personal information held by a government institution?
A member of parliament requests that the information not be disclosed
In the context of Canadian Health laws, one common theme with respect to consent is that it must be:
Meaningful
Which is NOT a main category into which Canadian jurist have classified privacy as it relates to privacy protection?
Communications privacy
Which Act bars organizations from requiring individuals to undergo a genetic test or disclose the results of a genetic test as a condition of providing goods or services or entering into a contract in Canada?
The Genetic Non-Discrimination Act
Section 4 of the regulations to the Privacy Act requires government institutions to retain personal information for at least how long following the last time is was used?
2 years
Which principle is almost single-handedly responsible for the recent proliferation of privacy notices?
Openness
Which of the following demonstrates the importance of the Personal Information Protection and Electronics Documents Act (PIPEDA) in the case between the Privacy Commissioner of Canada and the Society of Worldwide Interbank Financial Telecommunication (SWIFT)
Just because an organization operates in 2 or more jurisdictions does not alleviate its obligations to comply with Canadian Law
Barring an authorized extension, how long do Canadian government institutions have to grant access after an individual request?
30 days
