ExamGecko
Search Search Login
Home Home / IAPP / CIPP-C
Question list
Search
Search

List of questions

Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

As response to TJX Winners - Homesense, why is 'hashing' preferable to storing a personal identifier such as a driver's license number?
According to the Canadian Standards Association (CSA) Model Code, how long should personal information be retained?
Which act also includes references to the Privacy Act?
A private sector daycare's portal for parents stores their children's photos, allergy information and date of birth. A parent has asked about the portal's security requirements and in three months still not has received an answer. What is missing from the daycare's procedures?
A federally regulated company based in Ontario has customers in Ontario, Quebec, New Brunswick, Alberta and British Columbia. Unfortunately, a third-party vendor that provides marketing support to the company experiences a privacy breach which impacts the personal information of all its customers across the provinces where it operates. The Privacy Officer determines that the breach causes a real risk of significant harm to their customers and is tasked with reporting the breach to the relevant regulators. With which provincial privacy regulators does the company have to file a report?
Which is NOT a Canadian Standards Association (CSA) Privacy Principle?
A small commercial business in Canada was preparing a mailing to its customers when the letters and the envelopes were mismatched, causing 500 of 1000 letters to be sent to the wrong recipients. The letters contained the name and mailing address of the clients as well as account numbers and account balances. The business has discovered this error as clients called to report receiving the wrong letter and expressing concern that their information has been breached. Which of the following is the most appropriate next step to take?
Oversight authorities allow the following types of consent EXCEPT?
A commercial business in Canada is allowed to collect personal information without the knowledge or consent of the individual in all of the following circumstances EXCEPT when?
When a third country or specified entity is said to ensure an adequate level of protection essentially equivalent to that ensured within the European Union, it is awarded a(n)?

Question 25 - CIPP-C discussion

Report
Export

A private sector daycare's portal for parents stores their children's photos, allergy information and date of birth. A parent has asked about the portal's security requirements and in three months still not has received an answer. What is missing from the daycare's procedures?

A.

Ensuring transparency.

Answers
A.

Ensuring transparency.

B.

Responding to the parent's request within 30 days.

Answers
B.

Responding to the parent's request within 30 days.

C.

Ensuring strong encryption and security measures.

Answers
C.

Ensuring strong encryption and security measures.

D.

Completing a real risk of significant harm assessment (RROSH).

Answers
D.

Completing a real risk of significant harm assessment (RROSH).

Suggested answer: B
Show Answer
asked 22/11/2024
Adekunle Fodeke
30 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms