IAPP CIPP-C Practice Test - Questions Answers, Page 5

List of questions
Question 41

To whom does the Privacy Commissioner of Canada report?
Supreme Court of Canada and Prime Minister
House of Commons and the Senate.
Administrative tribunal.
Auditor General.
Question 42

In which situation could a request for access to one's personal information be denied under the Privacy Act?
The personal information was collected by the Royal Canadian Mounted Police while performing policing services for a province or municipality.
The personal information was obtained in confidence from a foreign state or agency which has consented to the disclosure of the information.
The release of the personal information could reasonably be expected to cause injury to a protected species of wildlife.
The personal information is more than 20 years old and relates to the detection or suppression of money laundering.
Question 43

What is the Canadian Courts' role in reviewing decisions by provincial oversight authorities?
Review all the investigative notes of the oversight authority, such as would be gathered during interviews.
Impose a prison sentence only, such as when an employee sells personal health information (PHI) for their own gain.
Look at specific types of errors made by the oversight authority such as a misinterpretation of a term in the legislation
Review and compare the oversight authority's decision or recommendation against those of other oversight authorities across Canada.
Question 44

According to the Canadian Standards Association (CSA) Model Code, how long should personal information be retained?
Personal information should not be retained at all.
Personal information should be retained indefinitely as long as consent has been given.
Personal information should be retained for at least two years after the last administrative use.
Personal information should be retained as long as necessary for the fulfillment of the purpose of the collection.
Question 45

What is the main reason a country might adopt an 'ombudsman' model of privacy oversight?
Question 46

According to the Voluntary Code of Conduct on the Responsible Development and Management of Advanced Generative AI Systems, signatories commit to doing all of the following EXCEPT?
Question 47

What must a federal government department do before it implements an electronic service (e-service)?
Question 48

In comparing British Columbia's privacy laws with the health information privacy acts of the remaining provinces, BC's privacy laws?
Question 49

ABC Corp uses a third-party provider to perform data analytics and sends the following data sets to the third party to run some reports: name, customer ID, age, transaction activity, transaction date, location, outcome, customer type.
If ABC Corp wants the third party to send all the data sets to their US based marketing partner for a new use, they must?
Question 50

Under the Privacy Act, when government institutions collect personal information?
Question