List of questions
Related questions
Question 76 - CIPP-C discussion
A small commercial business in Canada was preparing a mailing to its customers when the letters and the envelopes were mismatched, causing 500 of 1000 letters to be sent to the wrong recipients. The letters contained the name and mailing address of the clients as well as account numbers and account balances.
The business has discovered this error as clients called to report receiving the wrong letter and expressing concern that their information has been breached. Which of the following is the most appropriate next step to take?
All 1000 clients must be sent new letters.
The 500 clients who were impacted must be immediately notified.
The Office of the Privacy Commissioner (OPC) must be immediately notified.
A risk assessment must be completed to determine the real risk of significant harm (RROSH) to the clients.
0 comments
Leave a comment first