IAPP CIPP-C Practice Test - Questions Answers, Page 8
Question list
List of questions
Related questions
The process of de-identification where new data elements are substituted for identifying information is?
Shuffling.
Encryption.
Anonymization.
Pseudonymization.
Which organization was the primary influence in the development of Canadian privacy with their publication of a set of eight privacy principles?
The Organization for Economic Co-operation and Development (OECD).
The Canadian Institute of Chartered Accountants
The Center for Democracy and Technology (CRT)
The Canadian Standards Association (CSA).
When a third country or specified entity is said to ensure an adequate level of protection essentially equivalent to that ensured within the European Union, it is awarded a(n)?
Equivalency designation.
Attestation designation.
Adequacy designation.
Protection designation.
A commercial business in Canada is allowed to collect personal information without the knowledge or consent of the individual in all of the following circumstances EXCEPT when?
The collection is for journalistic or literary purposes.
The collection is in the interests of the individual and the consent cannot be obtained in a timely way.
The collection would lead to the creation of products that would benefit the public and consent would be difficult to obtain.
The collection, with the knowledge of the individual, would compromise the availability and accuracy of the information and the collection is reasonable for the purposes related to investigating
Oversight authorities allow the following types of consent EXCEPT?
Implied consent at the time of collection.
Verbal consent given to the person collecting the information.
Written consent included with the information that is collected.
General consent covering all activities associated with the personal information.
A small commercial business in Canada was preparing a mailing to its customers when the letters and the envelopes were mismatched, causing 500 of 1000 letters to be sent to the wrong recipients. The letters contained the name and mailing address of the clients as well as account numbers and account balances.
The business has discovered this error as clients called to report receiving the wrong letter and expressing concern that their information has been breached. Which of the following is the most appropriate next step to take?
All 1000 clients must be sent new letters.
The 500 clients who were impacted must be immediately notified.
The Office of the Privacy Commissioner (OPC) must be immediately notified.
A risk assessment must be completed to determine the real risk of significant harm (RROSH) to the clients.
Question