ExamGecko
Search Search Login
Home Home / IAPP / CIPP-C
Question list
Search
Search

List of questions

Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

As response to TJX Winners - Homesense, why is 'hashing' preferable to storing a personal identifier such as a driver's license number?
According to the Canadian Standards Association (CSA) Model Code, how long should personal information be retained?
Which act also includes references to the Privacy Act?
A private sector daycare's portal for parents stores their children's photos, allergy information and date of birth. A parent has asked about the portal's security requirements and in three months still not has received an answer. What is missing from the daycare's procedures?
Which is NOT a Canadian Standards Association (CSA) Privacy Principle?
A small commercial business in Canada was preparing a mailing to its customers when the letters and the envelopes were mismatched, causing 500 of 1000 letters to be sent to the wrong recipients. The letters contained the name and mailing address of the clients as well as account numbers and account balances. The business has discovered this error as clients called to report receiving the wrong letter and expressing concern that their information has been breached. Which of the following is the most appropriate next step to take?
Oversight authorities allow the following types of consent EXCEPT?
A commercial business in Canada is allowed to collect personal information without the knowledge or consent of the individual in all of the following circumstances EXCEPT when?
When a third country or specified entity is said to ensure an adequate level of protection essentially equivalent to that ensured within the European Union, it is awarded a(n)?
Which organization was the primary influence in the development of Canadian privacy with their publication of a set of eight privacy principles?

Question 33 - CIPP-C discussion

Report
Export

According to the Alberta Personal Information Protection Act, which of the following data breach reporting notifications to the commissioner is NOT automatically triggered when real risk of significant harm (RROSH) has been determined?

A.

Providing a description of the steps the organization will take to notify the affected individual(s).

Answers
A.

Providing a description of the steps the organization will take to notify the affected individual(s).

B.

Providing a description of the steps the organization has taken to reduce or mitigate that harm.

Answers
B.

Providing a description of the steps the organization has taken to reduce or mitigate that harm.

C.

Providing an estimate of the number of individuals affected by the breach.

Answers
C.

Providing an estimate of the number of individuals affected by the breach.

D.

Providing a description of the personal information involved in the breach.

Answers
D.

Providing a description of the personal information involved in the breach.

Suggested answer: C
Show Answer
asked 22/11/2024
Donovan Rodriguez
31 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms