IAPP Certified Information Privacy Professional/ Canada (CIPP/C) - CIPP-C Exam Questions

QUESTION NO: 1
What is the primary motivation for a federal government entity to complete a Privacy Impact Assessment (PIA)?

QUESTION NO: 2
Under the Personal Information Protection and Electronic Documents Act (PIPEDA), an organization must maintain a record of every breach of security safeguards involving personal information for a minimum of?

QUESTION NO: 3
In Ontario, a patient attends an appointment with a physician and reveals information about some new symptoms that she has been experiencing. Based on this information, the physician diagnoses the patient with a condition and prepares the report detailing the applicable history and diagnosis. The report is added to the patient's record. The patient later regrets revealing certain facts and doesn't want anyone else to know about these symptoms or the diagnosis. She acknowledges that the information she provided was correct and does not question the diagnosis.
Which of the following requests would the patient be most successful at pursuing?

QUESTION NO: 4
What is the main reason a country might adopt an "ombudsman" model of privacy oversight?

QUESTION NO: 5
Why is biometric information considered sensitive personal information in almost all circumstances?

QUESTION NO: 6
Which province requires its government bodies to store and access personal information exclusively in Canada unless additional consent is obtained, or if outside storage is judged necessary?

QUESTION NO: 7
Of the key principles in the Personal Information Protection and Electronic Documents Act (PIPEDA), which principle in particular contributes to the increase in privacy policies in recent years?

QUESTION NO: 8
According to the Voluntary Code of Conduct on the Responsible Development and Management of Advanced Generative AI Systems, signatories commit to doing all of the following EXCEPT?