Protecting Workplace Information Course: Personal information and Canadian privacy law

1. السؤال 1 من 16

   A personnel file holds these items. Which one is personal information?

   • AThe company's head office address
   • BThe date the office was last painted
   • CThe number of desks on the second floor of the office
   • DA supervisor's written evaluation of the employee
   أظهر الإجابة

   الإجابة: D. A supervisor's written evaluation of the employee

   Under PIPEDA, opinions and evaluations about an identifiable person are personal information.

2. السؤال 2 من 16

   Does information have to be written down to count as personal information under PIPEDA?

   • ANo, it can be recorded or not recorded
   • BYes, it must be saved in a computer system
   • CYes, it must be written on paper
   • DYes, it must be signed by the person
   أظهر الإجابة

   الإجابة: A. No, it can be recorded or not recorded

   PIPEDA defines personal information as information about an identifiable person, whether or not it is recorded.

3. السؤال 3 من 16

   Which kind of information is generally outside PIPEDA when it is used only to reach someone about their job?

   • AA record of a person's income
   • BBusiness contact information, such as a work phone number
   • CA home address that is kept in an employee's personnel file
   • DA copy of a person's medical record
   أظهر الإجابة

   الإجابة: B. Business contact information, such as a work phone number

   PIPEDA does not cover business contact information used only to communicate with someone about their job or profession.

4. السؤال 4 من 16

   A security company works only in Ontario and collects customer information in its business. Which privacy law usually applies?

   • APIPEDA
   • BOntario's private-sector privacy law
   • CNo privacy law applies to small businesses
   • DThe federal Privacy Act
   أظهر الإجابة

   الإجابة: A. PIPEDA

   Ontario does not have a substantially similar private-sector law, so PIPEDA covers commercial activity there.

5. السؤال 5 من 16

   A retail chain works only inside Alberta. Which law usually covers the customer information it collects?

   • APIPEDA
   • BQuebec's private-sector law, since it covers all of Canada
   • CAlberta's own private-sector privacy law
   • DThe federal Privacy Act
   أظهر الإجابة

   الإجابة: C. Alberta's own private-sector privacy law

   Alberta, British Columbia and Quebec have private-sector laws considered substantially similar to PIPEDA, which apply instead inside those provinces.

6. السؤال 6 من 16

   A bank has employees in Quebec. Which law covers the bank's employee information?

   • AThe federal Privacy Act
   • BQuebec's private-sector law, since the employees work in Quebec
   • CNo law covers employee records
   • DPIPEDA, because banks are federally regulated
   أظهر الإجابة

   الإجابة: D. PIPEDA, because banks are federally regulated

   Federally regulated organizations such as banks are always subject to PIPEDA, including for their employees' information.

7. السؤال 7 من 16

   Which law covers how federal government institutions handle personal information?

   • AThe Bank Act
   • BEach province's health information law
   • CPIPEDA
   • DThe Privacy Act
   أظهر الإجابة

   الإجابة: D. The Privacy Act

   The Privacy Act applies to federal government institutions; PIPEDA covers private-sector commercial activity.

8. السؤال 8 من 16

   Which four provinces have health information laws declared substantially similar to PIPEDA?

   • AOntario, Manitoba, Saskatchewan and Prince Edward Island
   • BOntario, New Brunswick, Nova Scotia, and Newfoundland and Labrador
   • CNew Brunswick, Nova Scotia, Prince Edward Island, and Newfoundland and Labrador
   • DAlberta, British Columbia, Quebec and Manitoba
   أظهر الإجابة

   الإجابة: B. Ontario, New Brunswick, Nova Scotia, and Newfoundland and Labrador

   The OPC lists Ontario, New Brunswick, Nova Scotia, and Newfoundland and Labrador for substantially similar health laws.

9. السؤال 9 من 16

   Which office oversees PIPEDA?

   • AThe Competition Bureau
   • BThe labour standards office in each province and territory
   • CThe Canadian Centre for Cyber Security
   • DThe Office of the Privacy Commissioner of Canada
   أظهر الإجابة

   الإجابة: D. The Office of the Privacy Commissioner of Canada

   The Office of the Privacy Commissioner of Canada oversees both PIPEDA and the Privacy Act.

10. السؤال 10 من 16

    Which PIPEDA principle says to collect only the information needed for an identified purpose?

    • AChallenging compliance
    • BOpenness
    • CAccuracy
    • DLimiting collection
    أظهر الإجابة

    الإجابة: D. Limiting collection

    Limiting collection means collecting only what is needed for the stated purpose, by fair and lawful means.

11. السؤال 11 من 16

    Which PIPEDA principle requires an organization to name a person responsible for privacy compliance?

    • AAccountability
    • BIdentifying purposes
    • CConsent
    • DSafeguards
    أظهر الإجابة

    الإجابة: A. Accountability

    Under accountability, an organization appoints someone responsible for compliance, sets policies and trains staff.

12. السؤال 12 من 16

    A clinic collected patients' phone numbers to book appointments. A receptionist wants to use them to advertise her own side business. Which principle would this break?

    • ALimiting use, disclosure and retention
    • BOpenness
    • CAccuracy
    • DIndividual access
    أظهر الإجابة

    الإجابة: A. Limiting use, disclosure and retention

    Personal information may be used only for the purpose it was collected for unless the person consents or the law requires otherwise.

13. السؤال 13 من 16

    Your team keeps four lists. Which one holds the most sensitive kind of personal information?

    • ANotes about employees' medical accommodations
    • BThe weekly schedule of staff shift start times
    • CStaff members' preferred first names
    • DStaff members' desk phone extensions
    أظهر الإجابة

    الإجابة: A. Notes about employees' medical accommodations

    Health information is generally treated as sensitive and needs stronger safeguards.

14. السؤال 14 من 16

    Which of these is an organizational safeguard?

    • AStaff training and confidentiality agreements
    • BLocked filing cabinets
    • CAn alarm system on the file room
    • DEncryption on all laptops and phones that leave the office
    أظهر الإجابة

    الإجابة: A. Staff training and confidentiality agreements

    Organizational safeguards include clearances, limiting access, training and agreements; locks and alarms are physical, and encryption is technological.

15. السؤال 15 من 16

    Your company sends customer records to an outside firm for processing. Who is responsible for protecting the records?

    • AThe customers, because it is their information
    • BOnly the outside firm, once it receives them
    • CYour company stays responsible for them
    • DNobody, until a breach happens
    أظهر الإجابة

    الإجابة: C. Your company stays responsible for them

    Under accountability, an organization remains responsible for personal information it transfers to a third party for processing.

16. السؤال 16 من 16

    A sign-in sheet at a community hall lists only first and last names. It is for a support group for people with addictions. Why is the sheet sensitive?

    • AAll lists of names are sensitive under PIPEDA
    • BIt is not personal information because it has no ID numbers
    • CThe context reveals private facts about the people listed
    • DAny list with more than 10 names is sensitive
    أظهر الإجابة

    الإجابة: C. The context reveals private facts about the people listed

    The OPC says any information can be sensitive depending on the context; here, being on the list reveals something private.

لوحة المفاتيح: 1–4 للإجابة، وEnter للسؤال التالي.