Protecting Workplace Information Course 2026

This course is for employees in Canada who handle customer, employee or business information. It covers classifying information and need-to-know, privacy law basics, safe sharing, printing and disposal, remote work and cloud services, and what to do about privacy breaches. Each topic has a lesson and an untimed quiz, then a timed 35-question final assessment; score 80% or more to earn a Certificate of Completion.

  • Kurs
  • Kanada
  • 98 Fragen
  • Geprüft am 13. Oktober 2026
  • Faktengeprüft am 13. Oktober 2026

Kurz und knapp

Dieser kostenlose Kurs hat Lektionen für etwa 150 Minuten, 6 Themenquizze ohne Zeitlimit (98 Fragen insgesamt) und eine zeitlich begrenzte Abschlussprüfung mit 35 zufällig gezogenen Fragen. Mit 80 % oder mehr in der Abschlussprüfung laden Sie eine Teilnahmebescheinigung herunter (privat, nicht akkreditiert). Am 13. Oktober 2026 mit offiziellen Quellen abgeglichen.

Beginnen Sie mit den LektionenProtecting Workplace Information Course: Lessons: etwa 150 Minuten Lesezeit. Jede Testfrage wird in den Lektionen behandelt.

Das lernen Sie

  • Classify workplace information and apply the need-to-know rule
  • Explain what personal information is and which Canadian privacy law usually applies
  • Share information safely by email, in conversation and in approved tools
  • Store, keep and dispose of paper and electronic records securely
  • Protect work information at home, on devices and in cloud services
  • Recognize a privacy breach, take the first steps and explain the reporting rules

Erreichen Sie mindestens 80 %, um Ihr Zertifikat herunterzuladen.

Ihr Lernplan

Lesen Sie jede Lektion, machen Sie das Themenquiz dazu (ohne Zeitlimit, mit Erklärungen) und dann die zeitlich begrenzte Abschlussprüfung. Jedes Mal wird eine neue Mischung von Fragen gezogen. Ihr Fortschritt wird in diesem Browser gespeichert.

  1. Lektionen lesen6 Lektionen, etwa 150 Min.
  2. Themenquiz 1: Classifying information and need-to-know16 Fragen
  3. Themenquiz 2: Personal information and Canadian privacy law16 Fragen
  4. Themenquiz 3: Sharing information safely: email, talk and AI tools16 Fragen
  5. Themenquiz 4: Printing, storage, retention and disposal16 Fragen
  6. Themenquiz 5: Remote work, devices and cloud services16 Fragen
  7. Themenquiz 6: Privacy breaches: spot, contain and report18 Fragen
  8. Abschlussprüfung35 Fragen, 35 Min. · Mindestens 80 % erreichen

Themenquiz 1: Classifying information and need-to-know

  1. Frage 1 von 16

    What does it mean to classify information at work?
    Antwort anzeigen

    Antwort: C. Sorting it by the harm it could cause if it got out

    Classifying sorts information by the harm it could cause if lost, changed or shared wrongly, so everyone knows how to handle it.

  2. Frage 2 von 16

    How do classification labels help employees?
    Antwort anzeigen

    Antwort: B. They show at a glance how a document must be handled

    A label is a quick signal about how to store, share and dispose of a document.

  3. Frage 3 von 16

    Under PIPEDA, how should personal information be protected?
    Antwort anzeigen

    Antwort: B. In a way that matches how sensitive it is

    The safeguards principle says to protect personal information in a way that is appropriate to its sensitivity.

  4. Frage 4 von 16

    Using the four-level business scheme in this course, which label fits a job ad that is already posted on the company website?
    Antwort anzeigen

    Antwort: D. Public

    Information that is already approved and published for anyone to see is Public.

  5. Frage 5 von 16

    Using the four-level business scheme, which label usually fits a staff newsletter about the summer barbecue and parking changes?
    Antwort anzeigen

    Antwort: A. Internal

    It is meant for staff only, and little harm would come from a leak, so Internal fits.

  6. Frage 6 von 16

    Using the four-level business scheme, which label best fits the code that turns off the building alarm?
    Antwort anzeigen

    Antwort: C. Restricted

    An alarm code could lead to serious harm if it leaked, so it belongs at the highest level, shared with a small named group.

  7. Frage 7 von 16

    In the Government of Canada system, what is the main difference between Protected and Classified information?
    Antwort anzeigen

    Antwort: D. Protected: harm to a person or organization. Classified: harm to the national interest

    Protected levels cover harm to a person or organization, while Classified levels cover harm to the national interest.

  8. Frage 8 von 16

    Which Government of Canada level applies when a compromise could cause serious injury to a person or organization?
    Antwort anzeigen

    Antwort: C. Protected B

    Protected A is injury, Protected B is serious injury and Protected C is extremely grave injury to a person or organization.

  9. Frage 9 von 16

    Which Government of Canada level applies when a compromise could cause exceptionally grave injury to the national interest?
    Antwort anzeigen

    Antwort: D. Top Secret

    Top Secret is the Classified level for exceptionally grave injury to the national interest.

  10. Frage 10 von 16

    When and where should you mark a sensitive document with its security level?
    Antwort anzeigen

    Antwort: A. When you create it, at the top and bottom of the pages

    Marking a document at the top and bottom as soon as it is created makes its level clear to every reader.

  11. Frage 11 von 16

    A document has a public price list and one page of customer payment notes. How should it be labelled?
    Antwort anzeigen

    Antwort: C. At the level of its most sensitive part

    Safeguards must match how sensitive the information is, so the most sensitive part sets the protection the whole document needs.

  12. Frage 12 von 16

    A report on your desk has no label. A visitor asks for a copy. What is the right approach?
    Antwort anzeigen

    Antwort: D. No label does not mean public; use the approved release process

    Unlabelled or unclassified information is not automatically public; it is released only through approved procedures.

  13. Frage 13 von 16

    Why can a list of 10,000 customer addresses need a higher label than a single address?
    Antwort anzeigen

    Antwort: A. Combined records can cause much more harm if they leak

    Bundled data can be more sensitive than its parts; one address may be Protected A, but 10,000 would be at least Protected B.

  14. Frage 14 von 16

    What does need-to-know mean?
    Antwort anzeigen

    Antwort: C. You get access only to the information you need to do your job

    Access should be limited to what each person needs for their work; rank or clearance alone does not give a right to see information.

  15. Frage 15 von 16

    Read the situation. What should you do?

    A senior manager from another department, who has a high security clearance, emails you. She asks for a copy of a confidential staff investigation file. The investigation has nothing to do with her work.

    Antwort anzeigen

    Antwort: A. Politely decline and refer her to the file's owner

    Nobody is entitled to information because of rank or clearance; access needs a legitimate need-to-know, which she has not shown.

  16. Frage 16 von 16

    You cannot tell whether a draft contract should be Confidential or Restricted. What is the best approach?
    Antwort anzeigen

    Antwort: D. Treat it as Restricted for now and ask the document owner

    When in doubt, protect information at the higher level and check with the owner or your security officer; protecting it too little is the bigger risk.

Was Sie vor der Prüfung wissen sollten

  • Under PIPEDA, personal information is any factual or subjective information, recorded or not, about an identifiable individual.
  • Alberta, British Columbia and Quebec have private-sector privacy laws considered substantially similar to PIPEDA; Ontario, New Brunswick, Nova Scotia, and Newfoundland and Labrador have substantially similar health information laws.
  • Federally regulated organizations, such as banks, airlines and telecommunications companies, are always subject to PIPEDA, including for their employees' information.
  • Under PIPEDA, a breach that creates a real risk of significant harm must be reported to the Privacy Commissioner, and affected people must be notified as soon as feasible.
  • Organizations subject to PIPEDA must keep a record of every breach of security safeguards for two years, even breaches that are not reported.
  • The Privacy Commissioner says there is no one-size-fits-all retention period; organizations should set minimum and maximum periods for each type of personal information.
  • Government of Canada guidance says never to put protected, classified or personal information into public generative AI tools.

Häufig gestellte Fragen

Is this an official privacy certification?

No. When you pass the final assessment you get a PassEveryTest Certificate of Completion, which shows you finished this general skills course. It is not an accredited qualification, it is not a vendor, employer or government certification, and it does not replace the privacy training your employer requires.

How does the final assessment work?

It has 35 questions drawn at random from the course question bank, with a 35-minute time limit. You need 80% to pass, and each attempt gives you a new mix of questions.

How is this different from the cybersecurity awareness course?

The cybersecurity course focuses on phishing, scams, passwords and multi-factor authentication. This course focuses on handling information itself: labels, need-to-know, sharing, keeping and destroying records, remote work and privacy breaches.

Which privacy law applies to my workplace?

It depends on the type of organization and where it works. Most private businesses are covered by PIPEDA, but Alberta, British Columbia and Quebec have their own private-sector laws, federal government institutions are under the Privacy Act, and provincial governments, municipalities, universities, schools and hospitals are generally under provincial or territorial laws. Ask your privacy officer.

What should I do if I send personal information to the wrong person?

Report it right away to your supervisor or privacy officer, as your policy says. They may ask the recipient to delete the information, return it securely or hold it for collection.

Ist die Bescheinigung akkreditiert oder offiziell anerkannt?

Nein. Es ist eine private Teilnahmebescheinigung, nur für Ihr Wissen. Sie ist von keiner Behörde, Zulassungsstelle, Aufsichtsbehörde oder Bildungseinrichtung anerkannt, akkreditiert oder genehmigt und ersetzt keine gesetzlich vorgeschriebene Lizenz, Zertifizierung oder Ausbildung.

Quellen

Ähnliche Tests