CIPP-C Practice Test

CIPP-C Practice Test practice questions, page 3 of 3, with answer review and explanations.

Question 11

A company wants to invest in DEI initiatives within their organization and plans to survey employees by asking for locality, age, salary, gender, ethnicity, religion, sexual orientation, physical/mental disabilities, department, and job level. The best solution to protect the personal information collected in the survey is to?

  1. Use a pseudonym to identify employees.
  2. Choose a survey tool located in Canada.
  3. Encrypt the sensitive information collected and stored.
  4. Adjust all survey questions so that no identifying information can be collected.

Question 12

What must an organization do to fulfill the Personal Information Protection and Electronic Documents Act’s (PIPEDA) transparency requirements when transferring personal information to a foreign country?

  1. Inform customers if data is to be transferred outside of Canada and solicit additional consent.
  2. Give individuals with an existing business relationship the right to refuse transfer of their information.
  3. Advise customers that their data may be accessed by another jurisdiction's courts or law enforcement.
  4. Provide new customers with a measure-by-measure comparison of relevant foreign laws with Canadian laws.

Question 13

Which case, brought before the Federal Court, helped determine that the Office of the Privacy Commissioner of Canada (OPC) had jurisdiction to investigate complaints about United States companies collecting, using and disclosing the personal information of individuals within Canada?

  1. TJX Winners - Homesense.
  2. Facebook: 2019.
  3. Blood Tribe.
  4. Abika.com.

Question 14

A private sector daycare’s portal for parents stores their children’s photos, allergy information and date of birth. A parent has asked about the portal’s security requirements and in three months still not has received an answer. What is missing from the daycare’s procedures?

  1. Ensuring transparency.
  2. Responding to the parent's request within 30 days.
  3. Ensuring strong encryption and security measures.
  4. Completing a real risk of significant harm assessment (RROSH).

Question 15

Which act also includes references to the Privacy Act?

  1. The Access to Information Act.
  2. The Children’s Online Privacy Protection Act (COPPA).
  3. The Telecommunications Intercept and Access (TIA) Act.
  4. The Personal Information Protection and Electronic Documents Act (PIPEDA).