Certified Information Privacy Professional/ Canada (CIPP/C): CIPP-C

The Government of Canada's Directive on Privacy Impact Assessments applies to all of the following EXCEPT?

A. The Ministry of Health

B. The Bank of Canada.

C. Crown Corporations.

D. The Cabinet.

What is critical to consider when an organization responsible for a large number of records wants to outsource the storage of those records?

A. Determining if the personal information stored on the records will be used for data matching.

B. Putting into place a contractual agreement between the organization and the records storage company.

C. Conducting a Privacy Impact Assessment (PIA) prior to establishing a relationship with the storage company.

D. Establishing that consent gathered from individuals by the organization in order to store their personal information was informed and meaningful.

Which law provides employee benefits, but often mandates the collection of medical information?

A. The Occupational Safety and Health Act.

B. The Americans with Disabilities Act.

C. The Employee Medical Security Act.

D. The Family and Medical Leave Act.