Certified Information Privacy Professional Canada (CIPP/C) Practice Exam

These questions are part of the practice quiz. Start practicing

• Which of the following is NOT a data processing operation?
• What do the OECD Guidelines primarily provide?
• Which principle emphasizes the right of individuals to challenge and request modifications to their personal data?
• What year was the Fair Credit Reporting Act enacted in the United States?
• What do the CSA privacy principles provide for Canada’s PIPEDA?
• What significant change occurred with the EU Data Protection Directive in 2018?
• What type of regulation does a Professional Regulatory Body provide?
• What does the term 'de novo' mean in a legal context?
• What defines Seal Programs in data privacy?
• What is the main function of a Personal Information Agent in Quebec?
• Which element must be present for consent to be considered valid under GDPR?
• What significant document recognized the universal values of dignity, freedom, justice, and peace?
• What is one challenge the Privacy Commissioner of Canada faces when enforcing PIPEDA?
• What is the Canadian Standards Association (CSA) known for?
• What does Convention 108 aim to protect?
• What is meant by the term "Re-Identification" in data privacy?
• What should organizations do with personal data when it is no longer needed according to data privacy principles?
• Why do organizations conduct background screening checks?
• What does the term "Opt-In" refer to in privacy context?
• What does accountability in data protection refer to?
• Which of the following is a critical element in the process of ensuring employee privacy in organizations?
• Which definition accurately describes a privacy breach?
• Which document established the Charter Rights in Canada?
• What constitutes an adequate level of protection for personal data transfers?
• What is work product information related to?
• What type of institutions does Schedule III Banks consist of?
• Which organization co-created the WebTrust seal program?
• APEC privacy principles were adopted by which of the following?
• What does the Canadian Privacy Act primarily address?
• What is the main goal of the Online Privacy Alliance?
• What does the principle of 'security for privacy' entail?
• Which law mandates accurate data collection and allows consumers to access their information in the US?
• What is the mission of the Canadian Organization for the Advancement of Computers in Health (COACH)?
• What does the concept of transfer refer to in data privacy?
• What entails customer access in relation to personal information?
• What does the process of encryption achieve?
• What are 'Information Banks' as defined within Canadian privacy law?
• What is an example of an administrative purpose for utilizing personal information?
• Which of the following best defines "adverse action" according to the Fair Credit Reporting Act?
• What do the APEC Privacy Principles aim to balance?
• Which of the following best defines data elements?
• What type of law is primarily used in Canada for legislative purposes?
• What is the primary characteristic of direct marketing?
• In the context of data retention, what should organizations do according to best practices?
• What does the principle of Openness in information practices emphasize?
• What is the purpose of the Competition Act in Canada?
• Which of the following is NOT one of the three principles outlined in the Act Respecting the Protection of Personal Information in the Private Sector?
• Which principle is associated with data quality?
• How does the technology-based model for data protection primarily function?
• What does CCTV stand for?
• Who is responsible for enforcing PIPEDA?
• What does 'monitoring and enforcement' ensure in privacy practices?
• Which of the following is a characteristic of territorial privacy?
• What is the significance of the term "credit reports" in the context of Personal Information Agents?
• Why is accuracy important in the context of personal data?
• What do data protection authorities (DPAs) primarily do?
• What encompasses information privacy?
• Which organization developed the privacy principles that serve as the basis for Canada’s PIPEDA?
• Which Schedule of banks in Canada includes domestic banks authorized to accept deposits?
• What is the significance of 'Identifying Purposes' in privacy protection?
• What is the principle of Collection Limitation in data protection?
• What is the primary purpose of authentication?
• What is the goal of transparency in data processing?
• What is the significance of perimeter controls in a network security strategy?
• Which action is NOT part of the four steps outlined for responding to a privacy breach?
• How is the Canadian Senate constituted?
• What is the purpose of the Global Privacy Enforcement Network (GPEN)?
• Which organization developed the framework known as Generally Accepted Privacy Principles?
• Which of the following best describes an Electronic Communications Network?
• What does the term "Personal Information" signify under the California Consumer Privacy Act?
• Who qualifies as a data recipient?
• What does the term 'Employee Personal Data' refer to according to GDPR?
• What is the first step in responding to a privacy breach according to established guidelines?
• What right does an individual have regarding their personal data if it is found to be inaccurate?
• What is the significance of identifying a data subject?
• Which HTML method is known for being more secure when sending form data to a web page?
• What is the scope of administrative purposes when using personal data?
• What is one significant oversight provided by the Bank Act regarding customer information?
• Which right allows individuals to manage the accuracy of personal information held by organizations?
• Which document may also be referred to as a privacy policy?
• The concept of Retention in information life cycle refers to what?
• Which role typically oversees privacy compliance in an organization?
• What is the key difference between British Columbia’s PIPA and PIPEDA?
• What is breach disclosure?
• Which of the following best describes data quality principles?
• What is the purpose of a Commercial Electronic Message?
• What is the definition of Omnibus Laws?
• Which statement accurately defines Electronic Health Records?
• What role does the House of Commons play in Canada?
• Outsourcing involves which of the following practices?
• What is the Right of Access?
• What are value-added services commonly associated with in the service sector?
• What is Computer Forensics concerned with?
• What does the consent requirement in privacy laws typically refer to?
• What does bodily privacy primarily concern?
• What is required for affirmative consent?
• Which of the following describes behavioral advertising?
• In the context of consent, what does 'choice' refer to?
• What is the responsibility of a data processor?
• What age group does the Children's Online Privacy Protection Act (COPPA) specifically protect?
• What does the term "spam" refer to in digital communication?
• Which of the following is NOT a purpose of the Fair Credit Reporting Act?
• Which organization provides deposit insurance for Schedule I Banks in Canada?
• What is the role of the European Commission in the EU?
• In which province is civil law codified into a civil code?
• What does it mean for data to be "confidential"?
• Which of the following best describes the role of consent in data protection?
• Which of the following best describes the term "Rectification" in data privacy?
• What type of information is typically available in Public Records?
• What is the primary function of the Federal Trade Commission (FTC) in the United States?
• What does the Privacy of the Person primarily protect?
• What characterizes a privacy notice?
• Which principle is associated with the requirement for consent in data collection?
• What is the purpose of perimeter controls in an organization's network?
• Which principle is NOT included in the Model Code for Protection of Personal Information?
• What is the purpose of a Privacy Policy?
• Who can sue under the provisions created by CASL connected to the Competition Act?
• Which aspect of privacy does 'territorial privacy' refer to?
• Which factor is NOT considered when determining an adequate level of data protection?
• What common functionality exists across all Schedule banks in Canada regarding customer deposits?
• In which context does Convention 108 operate?
• What do comprehensive laws regulate?
• What is the primary goal of the Organisation for Economic Co-operation and Development (OECD)?
• What does RFID technology primarily use to identify people or objects?
• What is the primary focus of information privacy?
• How do data protection authorities (DPAs) enforce compliance?
• Who is responsible for the Canadian Chartered Accountant profession's standards?
• What does the 'Information Life Cycle' refer to?
• What type of information does customer information encompass?
• Which of the following is known as a synonym for Data Protection by Design?
• What are the two main goals of the Personal Information Protection and Electronic Documents Act (PIPEDA)?
• According to Article 88 of the General Data Protection Regulation, what must member states consider when processing employees' personal data?
• Which type of rights are the Charter Rights considered in Canada?
• What does the Right to Correct empower individuals to do?
• What does data processing encompass?
• Which of the following is a key requirement for organizations under the General Data Protection Regulation?
• What does a data processor do with personal data?
• What is 'Individual Access' in the context of privacy principles under PIPEDA?
• What do video surveillance guidelines primarily discourage?
• What distinguishes Schedule II Banks in Canada?
• What does Communications Privacy encompass?
• Which principle emphasizes the importance of having a legitimate reason for establishing personal files?
• In the context of privacy, what does 'retention' refer to?
• What constitutes a data breach?
• What type of personal data is categorized as "sensitive" by the U.S. Federal Trade Commission?
• What role does the Canadian Senate play in the legislative process?
• What does the GET method do in relation to web page form data?
• How is implicit consent typically established?
• What does information security aim to prevent?
• What is meant by the term 'data subject'?
• What type of information is considered Employee Information?
• What is a key restriction of Schedule III Banks in Canada?
• What is required of website operators under COPPA?
• What are cookies primarily used for on a website?
• Which element is essential for effective enforcement of data protection laws?
• In the context of the General Data Protection Regulation, how is "Personal Data" defined?
• Which statement best describes the importance of safeguarding personal data?
• Which of the following is NOT a goal of PIPEDA?
• Which of the following best describes affirmative consent?
• What year was the Act Respecting the Protection of Personal Information in the Private Sector established?
• Which foundational principles were outlined by Ann Cavoukian in the mid-1990s?
• Why was the EU Data Protection Directive established in 1995?
• The POST method in HTML is more secure than GET because it does what?
• What is the primary function of an Electronic Communications Service?
• What are the ten principles of Generally Accepted Privacy Principles focused on?
• What is an essential characteristic of Multi-Factor Authentication?
• How does CASL impact the Competition Act?
• What do the principles of fair information practices emphasize?
• Which act oversees how banks handle personal financial information?
• What is the primary focus of Alberta's PIPA?
• Which class of privacy includes territorial privacy?
• What are Sectoral Laws?
• In data protection terms, what is 'profiling' primarily associated with?
• What is a key characteristic of the POST method compared to the GET method?
• What does Canada's Anti-Spam Legislation (CASL) require when sending commercial electronic messages?
• What is one of the main responsibilities of the European Commission regarding data transfers?
• What can aggrieved individuals do under PIPEDA?
• What does the principle of 'fair information practices' generally advocate for?
• Why was the Act Respecting the Protection of Personal Information in the Private Sector created?
• What does the concept of "Opt-Out" signify in terms of individual choice regarding personal information?
• What is the main purpose of the proposed Do Not Track regulatory policy?
• Under PIPEDA, what constitutes "commercial activity"?
• What is a key requirement when using video surveillance according to the guidelines?
• Which of the following is NOT one of the principles identified by the Canadian Standards Association?
• Online Behavioral Advertising primarily concerns what activity?
• Which model emphasizes the use of technological measures for data protection?
• What does a Privacy Impact Assessment (PIA) evaluate?
• Which of the following describes "outsourcing" in the context of personal information handling?
• In what context can data be considered more or less sensitive?
• How does the definition of "Personal Data" in the EU differ from other terms used globally?
• What is Semayne's Case known for establishing?
• What does implied consent depend on?
• What kind of risks does information security assess?
• What aspect of privacy is territorial privacy concerned with?
• What is the role of a data controller?