PassEveryTest
Français

Privacy and Personal Information Course 2026

This course is for security guards who handle visitor logs, ID checks, reports and CCTV. It explains what personal information is, which privacy laws apply in Canada, the 10 fair information principles, video surveillance guidelines, access requests and what to do about privacy breaches.

  • Formation
  • Canada
  • 25 questions
  • Vérifié le 11 octobre 2026

En bref

Ce cours gratuit comprend environ 10 minutes de leçons et un test de 25 questions. Obtenez 80 % ou plus pour télécharger une attestation de réussite (privée, non accréditée). Vérifié à partir des sources officielles le 11 octobre 2026.

Commencez par les leçonsPrivacy and Personal Information: Lessons : environ 10 minutes de lecture. Chaque question du test est traitée dans les leçons.

Ce que vous allez apprendre

  • Identify personal information in everyday security work
  • Explain which privacy law applies in different provinces
  • Apply the 10 fair information principles on the job
  • Follow good practice for video surveillance
  • Handle access requests and report privacy breaches

Obtenez 80 % ou plus pour télécharger votre certificat.

  1. Question 1 sur 25

    Which of these is personal information?
    Voir la réponse

    Réponse: D. A visitor's name and ID number written in a sign-in log

    Personal information is information about an identifiable person, such as a name, age or ID number.

  2. Question 2 sur 25

    According to the Privacy Commissioner of Canada, can opinions and evaluations about a person be personal information?
    Voir la réponse

    Réponse: A. Yes, comments, evaluations and disciplinary actions about a person are personal information

    Opinions, evaluations, comments and disciplinary actions about an identifiable person are personal information.

  3. Question 3 sur 25

    Which organizations does PIPEDA generally apply to?
    Voir la réponse

    Réponse: B. Private-sector organizations that collect, use or disclose personal information in commercial activity

    PIPEDA covers private-sector organizations in their commercial activities, plus federally regulated businesses.

  4. Question 4 sur 25

    Which provinces have private-sector privacy laws considered substantially similar to PIPEDA?
    Voir la réponse

    Réponse: C. Alberta, British Columbia and Quebec

    Organizations covered by these provincial laws are generally exempt from PIPEDA for activities within that province.

  5. Question 5 sur 25

    A security company operates only in Yukon. Which privacy law generally covers its commercial activities?
    Voir la réponse

    Réponse: A. PIPEDA, because organizations in the territories are considered federally regulated

    The Privacy Commissioner says organizations in the Northwest Territories, Yukon and Nunavut are considered federally regulated, so PIPEDA applies.

  6. Question 6 sur 25

    Which laws generally cover privacy at hospitals, universities and municipalities?
    Voir la réponse

    Réponse: D. Provincial laws

    The Privacy Commissioner notes that municipalities, universities, schools and hospitals are generally covered by provincial laws.

  7. Question 7 sur 25

    Which of these is one of PIPEDA's 10 fair information principles?
    Voir la réponse

    Réponse: D. Limiting collection

    The principles include accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access and challenging compliance.

  8. Question 8 sur 25

    A site's visitor log asks for name, company and time in. A guard also starts writing down visitors' home addresses "just in case". Which principle does this break?
    Voir la réponse

    Réponse: B. Limiting collection

    Collect only what is needed for the identified purpose. Extra information adds risk with no benefit.

  9. Question 9 sur 25

    What does the safeguards principle mean for a guard's notebook and reports?
    Voir la réponse

    Réponse: D. Protect them with security that fits how sensitive they are, such as keeping them locked away

    Personal information must be protected against loss, theft and unauthorized access.

  10. Question 10 sur 25

    What does the accountability principle mean?
    Voir la réponse

    Réponse: C. The organization is responsible for the personal information it controls and names someone to oversee compliance

    Accountability means the organization is responsible and designates a person, often a privacy officer, to oversee compliance.

  11. Question 11 sur 25

    Under PIPEDA, how long does a business generally have to respond to a person's request for access to their own personal information?
    Voir la réponse

    Réponse: D. 30 calendar days

    Businesses generally must respond within 30 calendar days.

  12. Question 12 sur 25

    When may a business extend the time to respond to an access request?
    Voir la réponse

    Réponse: B. In limited cases, by up to 30 more days, telling the person within the first 30 days

    An extension of up to 30 days is allowed in limited cases, such as when meeting the deadline would seriously disrupt operations.

  13. Question 13 sur 25

    A person asks a guard for a copy of video showing themselves. What should the guard do?
    Voir la réponse

    Réponse: B. Refer the request to the supervisor or privacy officer under site policy

    People have a right to access images of themselves, but requests go through the proper process so other people's identities can be protected.

  14. Question 14 sur 25

    According to the Privacy Commissioner's video surveillance guidelines, where should camera notice signs be placed?
    Voir la réponse

    Réponse: A. Where people will see them before they enter the area being watched

    Notice should let people know about cameras before they enter, and should include a contact for questions.

  15. Question 15 sur 25

    Where should security cameras never be aimed?
    Voir la réponse

    Réponse: B. Washrooms, change rooms and similar private areas

    The guidelines say cameras must not be aimed at places where people expect more privacy, such as washrooms and change rooms.

  16. Question 16 sur 25

    According to the guidelines, when should video surveillance systems record sound?
    Voir la réponse

    Réponse: C. Not unless there is a specific need

    Audio recording is more intrusive and should not be used unless there is a specific need.

  17. Question 17 sur 25

    How long should recordings be kept?
    Voir la réponse

    Réponse: C. Only as long as needed for the purpose, then destroyed securely

    Keep recordings only as long as necessary for their purpose and destroy them securely when no longer needed.

  18. Question 18 sur 25

    When cameras are watched live by an operator, when do the guidelines suggest recording should be turned on?
    Voir la réponse

    Réponse: C. Only when unlawful activity is suspected or observed

    Limiting recording reduces the amount of personal information collected.

  19. Question 19 sur 25

    A building manager asks a guard to use parking garage video to track when one tenant comes and goes. What is the right answer?
    Voir la réponse

    Réponse: B. Decline, because footage should be used only for its stated purpose or as the law allows

    The guidelines give tracking tenants' movements as an example of misuse.

  20. Question 20 sur 25

    A police officer asks a guard for a copy of footage. What should the guard do?
    Voir la réponse

    Réponse: A. Follow site procedure, involve the supervisor if required, and record what was given, to whom and why

    Disclosures outside the organization should be justified and documented. Sites usually have a process for police requests.

  21. Question 21 sur 25

    A guard loses a notebook containing residents' names and phone numbers. What should the guard do first?
    Voir la réponse

    Réponse: C. Report it to the supervisor right away

    A lost notebook may be a privacy breach. Reporting quickly lets the organization reduce harm and meet its legal duties.

  22. Question 22 sur 25

    Under PIPEDA, when must a business report a breach to the Privacy Commissioner and notify the people affected?
    Voir la réponse

    Réponse: B. When it is reasonable to believe the breach creates a real risk of significant harm

    The test is a real risk of significant harm, whatever the number of people affected.

  23. Question 23 sur 25

    Which of these does the Privacy Commissioner list as "significant harm"?
    Voir la réponse

    Réponse: A. Humiliation or damage to reputation

    Significant harm includes bodily harm, humiliation, damage to reputation, financial loss, identity theft and loss of employment opportunities.

  24. Question 24 sur 25

    How long must a business subject to PIPEDA keep a record of every breach of security safeguards?
    Voir la réponse

    Réponse: C. 24 months after it decides the breach happened

    The Breach of Security Safeguards Regulations require a record of every breach for 24 months, whether or not it was reportable.

  25. Question 25 sur 25

    A guard wants to photograph an incident. What is the best practice?
    Voir la réponse

    Réponse: B. Use an employer-approved device and follow policy, rather than storing images on a personal phone

    Personal phones are hard to secure and easy to share from. Use approved devices so images stay protected.

À savoir avant l’examen

  • PIPEDA covers private-sector organizations that collect, use or disclose personal information in commercial activity; Alberta, British Columbia and Quebec have substantially similar private-sector laws.
  • PIPEDA is built on 10 fair information principles, including limiting collection, safeguards and individual access.
  • The Privacy Commissioner's video surveillance guidelines say cameras must not be aimed at washrooms or change rooms, and recordings should be kept only as long as needed.
  • A business generally has 30 calendar days to respond to a request for access to personal information, with a possible extension of up to 30 more days.
  • Breaches creating a real risk of significant harm must be reported to the Privacy Commissioner, and records of every breach must be kept for 24 months.

Questions fréquentes

Does privacy law apply to security guards?

Yes. Guards collect personal information for their employer and clients, so they must follow the privacy law that applies (PIPEDA or a provincial law) and their employer's privacy policy.

Can a security guard give CCTV footage to police?

Footage can be used as the law allows, and the Privacy Commissioner's example is sharing car break-in video with police. Follow your site's procedure and document the disclosure.

What should I do if I lose a notebook or report?

Report it to your supervisor right away. It may be a privacy breach that the organization must assess and, if there is a real risk of significant harm, report.

Can people see video of themselves?

Yes, people have a right to access images of themselves. Refer the request to your supervisor or privacy officer so other people in the footage can be protected.

L’attestation est-elle accréditée ou reconnue officiellement ?

Non. C’est une attestation de réussite privée, uniquement pour vos connaissances. Elle n’est reconnue, accréditée ni approuvée par aucun gouvernement, organisme de délivrance des permis, autorité de réglementation ou établissement d’enseignement, et elle ne remplace aucun permis, aucune certification ni aucune formation exigés par la loi.

Sources

Tests associés