Privacy and Personal Information Course 2026

1. السؤال 1 من 25

   Which of these is personal information?

   • AThe date of a fire drill
   • BThe make of the building's alarm panel
   • CThe number of floors in a building
   • DA visitor's name and ID number written in a sign-in log
   أظهر الإجابة

   الإجابة: D. A visitor's name and ID number written in a sign-in log

   Personal information is information about an identifiable person, such as a name, age or ID number.

2. السؤال 2 من 25

   According to the Privacy Commissioner of Canada, can opinions and evaluations about a person be personal information?

   • AYes, comments, evaluations and disciplinary actions about a person are personal information
   • BOnly if they are written on paper
   • COnly if the person agrees they are true
   • DNo, only names and numbers count
   أظهر الإجابة

   الإجابة: A. Yes, comments, evaluations and disciplinary actions about a person are personal information

   Opinions, evaluations, comments and disciplinary actions about an identifiable person are personal information.

3. السؤال 3 من 25

   Which organizations does PIPEDA generally apply to?

   • AOnly individuals at home
   • BPrivate-sector organizations that collect, use or disclose personal information in commercial activity
   • COnly hospitals and schools
   • DOnly federal government departments
   أظهر الإجابة

   الإجابة: B. Private-sector organizations that collect, use or disclose personal information in commercial activity

   PIPEDA covers private-sector organizations in their commercial activities, plus federally regulated businesses.

4. السؤال 4 من 25

   Which provinces have private-sector privacy laws considered substantially similar to PIPEDA?

   • ASaskatchewan, Prince Edward Island and Yukon
   • BOntario, Manitoba and Nova Scotia
   • CAlberta, British Columbia and Quebec
   • DOnly Ontario
   أظهر الإجابة

   الإجابة: C. Alberta, British Columbia and Quebec

   Organizations covered by these provincial laws are generally exempt from PIPEDA for activities within that province.

5. السؤال 5 من 25

   A security company operates only in Yukon. Which privacy law generally covers its commercial activities?

   • APIPEDA, because organizations in the territories are considered federally regulated
   • BNo privacy law at all
   • CQuebec's law
   • DAlberta's law
   أظهر الإجابة

   الإجابة: A. PIPEDA, because organizations in the territories are considered federally regulated

   The Privacy Commissioner says organizations in the Northwest Territories, Yukon and Nunavut are considered federally regulated, so PIPEDA applies.

6. السؤال 6 من 25

   Which laws generally cover privacy at hospitals, universities and municipalities?

   • APIPEDA
   • BNo law
   • CThe Criminal Code
   • DProvincial laws
   أظهر الإجابة

   الإجابة: D. Provincial laws

   The Privacy Commissioner notes that municipalities, universities, schools and hospitals are generally covered by provincial laws.

7. السؤال 7 من 25

   Which of these is one of PIPEDA's 10 fair information principles?

   • AUnlimited sharing
   • BKeep everything forever
   • CCollect first, decide later
   • DLimiting collection
   أظهر الإجابة

   الإجابة: D. Limiting collection

   The principles include accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access and challenging compliance.

8. السؤال 8 من 25

   A site's visitor log asks for name, company and time in. A guard also starts writing down visitors' home addresses "just in case". Which principle does this break?

   • AOpenness
   • BLimiting collection
   • CAccuracy
   • DChallenging compliance
   أظهر الإجابة

   الإجابة: B. Limiting collection

   Collect only what is needed for the identified purpose. Extra information adds risk with no benefit.

9. السؤال 9 من 25

   What does the safeguards principle mean for a guard's notebook and reports?

   • ALeave them on the desk so anyone can read them
   • BThrow them in the recycling when full
   • CTake photos of them for a personal backup
   • DProtect them with security that fits how sensitive they are, such as keeping them locked away
   أظهر الإجابة

   الإجابة: D. Protect them with security that fits how sensitive they are, such as keeping them locked away

   Personal information must be protected against loss, theft and unauthorized access.

10. السؤال 10 من 25

    What does the accountability principle mean?

    • AEach visitor is responsible for protecting their own data
    • BOnly the police are responsible for privacy
    • CThe organization is responsible for the personal information it controls and names someone to oversee compliance
    • DNobody is responsible if a breach happens
    أظهر الإجابة

    الإجابة: C. The organization is responsible for the personal information it controls and names someone to oversee compliance

    Accountability means the organization is responsible and designates a person, often a privacy officer, to oversee compliance.

11. السؤال 11 من 25

    Under PIPEDA, how long does a business generally have to respond to a person's request for access to their own personal information?

    • A7 days
    • B6 months
    • C1 year
    • D30 calendar days
    أظهر الإجابة

    الإجابة: D. 30 calendar days

    Businesses generally must respond within 30 calendar days.

12. السؤال 12 من 25

    When may a business extend the time to respond to an access request?

    • AOnly if the person pays a fee
    • BIn limited cases, by up to 30 more days, telling the person within the first 30 days
    • CWhenever it likes, for any length of time
    • DNever
    أظهر الإجابة

    الإجابة: B. In limited cases, by up to 30 more days, telling the person within the first 30 days

    An extension of up to 30 days is allowed in limited cases, such as when meeting the deadline would seriously disrupt operations.

13. السؤال 13 من 25

    A person asks a guard for a copy of video showing themselves. What should the guard do?

    • ARefuse and say people never have a right to see video
    • BRefer the request to the supervisor or privacy officer under site policy
    • CHand over a copy right away on a USB stick
    • DShow them all the footage, including other people
    أظهر الإجابة

    الإجابة: B. Refer the request to the supervisor or privacy officer under site policy

    People have a right to access images of themselves, but requests go through the proper process so other people's identities can be protected.

14. السؤال 14 من 25

    According to the Privacy Commissioner's video surveillance guidelines, where should camera notice signs be placed?

    • AWhere people will see them before they enter the area being watched
    • BInside the camera housing
    • COn the back of the building where no one goes
    • DOnly in the security office
    أظهر الإجابة

    الإجابة: A. Where people will see them before they enter the area being watched

    Notice should let people know about cameras before they enter, and should include a contact for questions.

15. السؤال 15 من 25

    Where should security cameras never be aimed?

    • AParking lot entrances
    • BWashrooms, change rooms and similar private areas
    • CMain lobbies
    • DLoading docks
    أظهر الإجابة

    الإجابة: B. Washrooms, change rooms and similar private areas

    The guidelines say cameras must not be aimed at places where people expect more privacy, such as washrooms and change rooms.

16. السؤال 16 من 25

    According to the guidelines, when should video surveillance systems record sound?

    • AWhenever a guard is bored
    • BAlways, to capture everything
    • CNot unless there is a specific need
    • DOnly at night
    أظهر الإجابة

    الإجابة: C. Not unless there is a specific need

    Audio recording is more intrusive and should not be used unless there is a specific need.

17. السؤال 17 من 25

    How long should recordings be kept?

    • AExactly one week, always
    • BUntil the hard drive is full, then deleted in bulk with no rules
    • COnly as long as needed for the purpose, then destroyed securely
    • DForever, in case they are useful
    أظهر الإجابة

    الإجابة: C. Only as long as needed for the purpose, then destroyed securely

    Keep recordings only as long as necessary for their purpose and destroy them securely when no longer needed.

18. السؤال 18 من 25

    When cameras are watched live by an operator, when do the guidelines suggest recording should be turned on?

    • AOnly when the operator takes a break
    • BNever
    • COnly when unlawful activity is suspected or observed
    • DOnly on weekends
    أظهر الإجابة

    الإجابة: C. Only when unlawful activity is suspected or observed

    Limiting recording reduces the amount of personal information collected.

19. السؤال 19 من 25

    A building manager asks a guard to use parking garage video to track when one tenant comes and goes. What is the right answer?

    • AAgree, but only for one week
    • BDecline, because footage should be used only for its stated purpose or as the law allows
    • CAgree, because the manager is the client
    • DPost the times on the lobby board
    أظهر الإجابة

    الإجابة: B. Decline, because footage should be used only for its stated purpose or as the law allows

    The guidelines give tracking tenants' movements as an example of misuse.

20. السؤال 20 من 25

    A police officer asks a guard for a copy of footage. What should the guard do?

    • AFollow site procedure, involve the supervisor if required, and record what was given, to whom and why
    • BRefuse to speak to the officer
    • CDelete the footage to avoid problems
    • DGive the officer the whole system password
    أظهر الإجابة

    الإجابة: A. Follow site procedure, involve the supervisor if required, and record what was given, to whom and why

    Disclosures outside the organization should be justified and documented. Sites usually have a process for police requests.

21. السؤال 21 من 25

    A guard loses a notebook containing residents' names and phone numbers. What should the guard do first?

    • AWait to see if anyone complains
    • BRewrite the notebook from memory
    • CReport it to the supervisor right away
    • DSay nothing and buy a new notebook
    أظهر الإجابة

    الإجابة: C. Report it to the supervisor right away

    A lost notebook may be a privacy breach. Reporting quickly lets the organization reduce harm and meet its legal duties.

22. السؤال 22 من 25

    Under PIPEDA, when must a business report a breach to the Privacy Commissioner and notify the people affected?

    • AOnly when more than 1,000 people are affected
    • BWhen it is reasonable to believe the breach creates a real risk of significant harm
    • CNever, if the breach was an accident
    • DOnly when the media finds out
    أظهر الإجابة

    الإجابة: B. When it is reasonable to believe the breach creates a real risk of significant harm

    The test is a real risk of significant harm, whatever the number of people affected.

23. السؤال 23 من 25

    Which of these does the Privacy Commissioner list as "significant harm"?

    • AHumiliation or damage to reputation
    • BSeeing a camera notice sign
    • CA short delay in getting a parking pass
    • DHaving to sign in at the front desk
    أظهر الإجابة

    الإجابة: A. Humiliation or damage to reputation

    Significant harm includes bodily harm, humiliation, damage to reputation, financial loss, identity theft and loss of employment opportunities.

24. السؤال 24 من 25

    How long must a business subject to PIPEDA keep a record of every breach of security safeguards?

    • AIt does not need to keep records
    • BUntil the next audit
    • C24 months after it decides the breach happened
    • D30 days
    أظهر الإجابة

    الإجابة: C. 24 months after it decides the breach happened

    The Breach of Security Safeguards Regulations require a record of every breach for 24 months, whether or not it was reportable.

25. السؤال 25 من 25

    A guard wants to photograph an incident. What is the best practice?

    • AUse a personal phone and keep the photos
    • BUse an employer-approved device and follow policy, rather than storing images on a personal phone
    • CPost the photos to warn the public
    • DShare the photos in a group chat with friends
    أظهر الإجابة

    الإجابة: B. Use an employer-approved device and follow policy, rather than storing images on a personal phone

    Personal phones are hard to secure and easy to share from. Use approved devices so images stay protected.

لوحة المفاتيح: 1–4 للإجابة، وEnter للسؤال التالي.