CIPP-C試験無料問題集（78題）「IAPP Certified Information Privacy Professional/ Canada (CIPP/C) 認定」

出題：1

According to the Canadian Standards Association (CSA) Model Code, how long should personal information be retained?

A. Personal information should be retained for at least two years after the last administrative use.

B. Personal information should not be retained at all.

C. Personal information should be retained indefinitely as long as consent has been given.

D. Personal information should be retained as long as necessary for the fulfillment of the purpose of the collection.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

A small commercial business in Canada was preparing a mailing to its customers when the letters and the envelopes were mismatched, causing 500 of 1000 letters to be sent to the wrong recipients. The letters contained the name and mailing address of the clients as well as account numbers and account balances.
The business has discovered this error as clients called to report receiving the wrong letter and expressing concern that their information has been breached. Which of the following is the most appropriate next step to take?

A. A risk assessment must be completed to determine the real risk of significant harm (RROSH) to the clients.

B. The 500 clients who were impacted must be immediately notified.

C. The Office of the Privacy Commissioner (OPC) must be immediately notified.

D. All 1000 clients must be sent new letters.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Which question is NOT part of the Office of the Privacy Commissioner of Canada's (OPC's) four-point test for establishing whether providing access to genetic testing results goes beyond what is necessary or reasonable?

A. Are the collection and the use proportionate to the benefits gained?

B. Are the validity and accuracy of individual test results guaranteed to be accurate?

C. Is the personal information likely to be effective in achieving a legitimate business purpose?

D. Are there less privacy-invasive alternatives?

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Which of the following provincial health acts is NOT considered substantially similar to the Personal Information Protection and Electronic Documents Act (PIPEDA)?

A. New Brunswick's Personal Health Information Privacy and Access Act (PHIPAA)

B. Nova Scotia's Personal Health Information Act (PHIPAA)

C. lAberta's Health Information Act (PHIA)

D. Ontario's Personal Health Information Protection Act (PHIPAA)

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

According to the Canadian Standards Association (CSA) Model Code, how long should personal information be retained?

A. Personal information should be retained for at least two years after the last administrative use.

B. Personal information should not be retained at all.

C. Personal information should be retained indefinitely as long as consent has been given.

D. Personal information should be retained as long as necessary for the fulfillment of the purpose of the collection.

正解：D 解答を投票する

出題：6

Which of the following specifically differentiates between regular personal information and employee-related or work-product information?

A. Personal Information Protection and Electronic Documents Act (PIPEDA).

B. The Quebec Act.

C. The Privacy Act.

D. British Columbia's Personal Information Protection Act

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

What must a federal government department do before it implements an electronic service (e-service)?

A. Conduct a preliminary PIA before acquiring the service

B. Publish a privacy statement in newspapers and on the government website.

C. Complete a PIA in accordance with Treasury Board guidelines.

D. Determine if the Office of the Privacy Commissioner must be notified of the launch of this new e-service

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

What is critical to consider when an organization responsible for a large number of records wants to outsource the storage of those records?

A. Putting into place a contractual agreement between the organization and the records storage company.

B. Establishing that consent gathered from individuals by the organization in order to store their personal information was informed and meaningful.

C. Conducting a Privacy Impact Assessment (PIA) prior to establishing a relationship with the storage company.

D. Determining if the personal information stored on the records will be used for data matching

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

CIPP-C試験無料問題集「IAPP Certified Information Privacy Professional/ Canada (CIPP/C) 認定」