CIPP-C 試験問題を無料オンラインアクセス

ABC Corp uses a third-party provider to perform data analytics and sends the following data sets to the third party to run some reports: name, customer ID, age, transaction activity, transaction date, location, outcome, customer type.
If ABC Corp wants the third party to send all the data sets to their US based marketing partner for a new use, they must?

• A.Anonymize the personal data before sending.
• B.Ensure the marketing partner has equal or stronger protections than Canada.
• C.Seek additional consent from their customers.
• D.Encrypt data in transit.

Under the Freedom of Information and Protection of Privacy Acts (FIPPA), personal information includes all of the following EXCEPT?

• A.Information about an individual's creditworthiness.
• B.Information about an individual's character references.
• C.Information about an individual's home business.
• D.Information about an individual's employment history.

According to the federal Privacy Commissioner, what protection is missing from the Privacy Act regarding outsourcing of government work that contains personal information?

• A.A statement indicating that the government institution from which the information is outsourced remains accountable for its security.
• B.A statement granting the Privacy Commissioner the right to issue orders following an investigation into a possible data breach.
• C.A statement requiring the government agency to complete a Privacy Impact Assessment (PIA) prior to outsourcing to a third party.
• D.A statement preventing the vendor to whom the information is outsourced to subcontract its processing.

What is the main reason a country might adopt an "ombudsman" model of privacy oversight?

• A.It reduces the perception that compliance is a confrontational process.
• B.It increases the power of the commissioner to enforce decisions.
• C.It provides a more streamlined process of complaint resolution.
• D.It provides a more detailed set of guidelines regarding possible violations.

Which of the following describes a difference between the federal Privacy Commissioner and provincial commissioners?

• A.The federal commissioner has the power to make an organization comply.
• B.The federal commissioner must receive complaints from a legislative representative.
• C.Provincial commissioners can order an organization to act.
• D.Provincial commissioners are limited to recommending actions.