PassEveryTest
Nederlands

Privacy and Personal Information Course 2026

This course is for security guards who handle visitor logs, ID checks, reports and CCTV. It explains what personal information is, which privacy laws apply in Canada, the 10 fair information principles, video surveillance guidelines, access requests and what to do about privacy breaches.

  • Cursus
  • Canada
  • 25 vragen
  • Gecontroleerd op 11 oktober 2026

Kort antwoord

Deze gratis cursus heeft ongeveer 10 minuten lessen en een toets van 25 vragen. Haal 80% of meer om een bewijs van deelname te downloaden (privé, niet geaccrediteerd). Gecontroleerd aan de hand van officiële bronnen op 11 oktober 2026.

Begin met de lessenPrivacy and Personal Information: Lessons: ongeveer 10 minuten leestijd. Elke testvraag wordt in de lessen behandeld.

Wat je leert

  • Identify personal information in everyday security work
  • Explain which privacy law applies in different provinces
  • Apply the 10 fair information principles on the job
  • Follow good practice for video surveillance
  • Handle access requests and report privacy breaches

Haal 80% of meer om je certificaat te downloaden.

  1. Vraag 1 van 25

    Which of these is personal information?
    Toon antwoord

    Antwoord: D. A visitor's name and ID number written in a sign-in log

    Personal information is information about an identifiable person, such as a name, age or ID number.

  2. Vraag 2 van 25

    According to the Privacy Commissioner of Canada, can opinions and evaluations about a person be personal information?
    Toon antwoord

    Antwoord: A. Yes, comments, evaluations and disciplinary actions about a person are personal information

    Opinions, evaluations, comments and disciplinary actions about an identifiable person are personal information.

  3. Vraag 3 van 25

    Which organizations does PIPEDA generally apply to?
    Toon antwoord

    Antwoord: B. Private-sector organizations that collect, use or disclose personal information in commercial activity

    PIPEDA covers private-sector organizations in their commercial activities, plus federally regulated businesses.

  4. Vraag 4 van 25

    Which provinces have private-sector privacy laws considered substantially similar to PIPEDA?
    Toon antwoord

    Antwoord: C. Alberta, British Columbia and Quebec

    Organizations covered by these provincial laws are generally exempt from PIPEDA for activities within that province.

  5. Vraag 5 van 25

    A security company operates only in Yukon. Which privacy law generally covers its commercial activities?
    Toon antwoord

    Antwoord: A. PIPEDA, because organizations in the territories are considered federally regulated

    The Privacy Commissioner says organizations in the Northwest Territories, Yukon and Nunavut are considered federally regulated, so PIPEDA applies.

  6. Vraag 6 van 25

    Which laws generally cover privacy at hospitals, universities and municipalities?
    Toon antwoord

    Antwoord: D. Provincial laws

    The Privacy Commissioner notes that municipalities, universities, schools and hospitals are generally covered by provincial laws.

  7. Vraag 7 van 25

    Which of these is one of PIPEDA's 10 fair information principles?
    Toon antwoord

    Antwoord: D. Limiting collection

    The principles include accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access and challenging compliance.

  8. Vraag 8 van 25

    A site's visitor log asks for name, company and time in. A guard also starts writing down visitors' home addresses "just in case". Which principle does this break?
    Toon antwoord

    Antwoord: B. Limiting collection

    Collect only what is needed for the identified purpose. Extra information adds risk with no benefit.

  9. Vraag 9 van 25

    What does the safeguards principle mean for a guard's notebook and reports?
    Toon antwoord

    Antwoord: D. Protect them with security that fits how sensitive they are, such as keeping them locked away

    Personal information must be protected against loss, theft and unauthorized access.

  10. Vraag 10 van 25

    What does the accountability principle mean?
    Toon antwoord

    Antwoord: C. The organization is responsible for the personal information it controls and names someone to oversee compliance

    Accountability means the organization is responsible and designates a person, often a privacy officer, to oversee compliance.

  11. Vraag 11 van 25

    Under PIPEDA, how long does a business generally have to respond to a person's request for access to their own personal information?
    Toon antwoord

    Antwoord: D. 30 calendar days

    Businesses generally must respond within 30 calendar days.

  12. Vraag 12 van 25

    When may a business extend the time to respond to an access request?
    Toon antwoord

    Antwoord: B. In limited cases, by up to 30 more days, telling the person within the first 30 days

    An extension of up to 30 days is allowed in limited cases, such as when meeting the deadline would seriously disrupt operations.

  13. Vraag 13 van 25

    A person asks a guard for a copy of video showing themselves. What should the guard do?
    Toon antwoord

    Antwoord: B. Refer the request to the supervisor or privacy officer under site policy

    People have a right to access images of themselves, but requests go through the proper process so other people's identities can be protected.

  14. Vraag 14 van 25

    According to the Privacy Commissioner's video surveillance guidelines, where should camera notice signs be placed?
    Toon antwoord

    Antwoord: A. Where people will see them before they enter the area being watched

    Notice should let people know about cameras before they enter, and should include a contact for questions.

  15. Vraag 15 van 25

    Where should security cameras never be aimed?
    Toon antwoord

    Antwoord: B. Washrooms, change rooms and similar private areas

    The guidelines say cameras must not be aimed at places where people expect more privacy, such as washrooms and change rooms.

  16. Vraag 16 van 25

    According to the guidelines, when should video surveillance systems record sound?
    Toon antwoord

    Antwoord: C. Not unless there is a specific need

    Audio recording is more intrusive and should not be used unless there is a specific need.

  17. Vraag 17 van 25

    How long should recordings be kept?
    Toon antwoord

    Antwoord: C. Only as long as needed for the purpose, then destroyed securely

    Keep recordings only as long as necessary for their purpose and destroy them securely when no longer needed.

  18. Vraag 18 van 25

    When cameras are watched live by an operator, when do the guidelines suggest recording should be turned on?
    Toon antwoord

    Antwoord: C. Only when unlawful activity is suspected or observed

    Limiting recording reduces the amount of personal information collected.

  19. Vraag 19 van 25

    A building manager asks a guard to use parking garage video to track when one tenant comes and goes. What is the right answer?
    Toon antwoord

    Antwoord: B. Decline, because footage should be used only for its stated purpose or as the law allows

    The guidelines give tracking tenants' movements as an example of misuse.

  20. Vraag 20 van 25

    A police officer asks a guard for a copy of footage. What should the guard do?
    Toon antwoord

    Antwoord: A. Follow site procedure, involve the supervisor if required, and record what was given, to whom and why

    Disclosures outside the organization should be justified and documented. Sites usually have a process for police requests.

  21. Vraag 21 van 25

    A guard loses a notebook containing residents' names and phone numbers. What should the guard do first?
    Toon antwoord

    Antwoord: C. Report it to the supervisor right away

    A lost notebook may be a privacy breach. Reporting quickly lets the organization reduce harm and meet its legal duties.

  22. Vraag 22 van 25

    Under PIPEDA, when must a business report a breach to the Privacy Commissioner and notify the people affected?
    Toon antwoord

    Antwoord: B. When it is reasonable to believe the breach creates a real risk of significant harm

    The test is a real risk of significant harm, whatever the number of people affected.

  23. Vraag 23 van 25

    Which of these does the Privacy Commissioner list as "significant harm"?
    Toon antwoord

    Antwoord: A. Humiliation or damage to reputation

    Significant harm includes bodily harm, humiliation, damage to reputation, financial loss, identity theft and loss of employment opportunities.

  24. Vraag 24 van 25

    How long must a business subject to PIPEDA keep a record of every breach of security safeguards?
    Toon antwoord

    Antwoord: C. 24 months after it decides the breach happened

    The Breach of Security Safeguards Regulations require a record of every breach for 24 months, whether or not it was reportable.

  25. Vraag 25 van 25

    A guard wants to photograph an incident. What is the best practice?
    Toon antwoord

    Antwoord: B. Use an employer-approved device and follow policy, rather than storing images on a personal phone

    Personal phones are hard to secure and easy to share from. Use approved devices so images stay protected.

Wat je moet weten voor het examen

  • PIPEDA covers private-sector organizations that collect, use or disclose personal information in commercial activity; Alberta, British Columbia and Quebec have substantially similar private-sector laws.
  • PIPEDA is built on 10 fair information principles, including limiting collection, safeguards and individual access.
  • The Privacy Commissioner's video surveillance guidelines say cameras must not be aimed at washrooms or change rooms, and recordings should be kept only as long as needed.
  • A business generally has 30 calendar days to respond to a request for access to personal information, with a possible extension of up to 30 more days.
  • Breaches creating a real risk of significant harm must be reported to the Privacy Commissioner, and records of every breach must be kept for 24 months.

Veelgestelde vragen

Does privacy law apply to security guards?

Yes. Guards collect personal information for their employer and clients, so they must follow the privacy law that applies (PIPEDA or a provincial law) and their employer's privacy policy.

Can a security guard give CCTV footage to police?

Footage can be used as the law allows, and the Privacy Commissioner's example is sharing car break-in video with police. Follow your site's procedure and document the disclosure.

What should I do if I lose a notebook or report?

Report it to your supervisor right away. It may be a privacy breach that the organization must assess and, if there is a real risk of significant harm, report.

Can people see video of themselves?

Yes, people have a right to access images of themselves. Refer the request to your supervisor or privacy officer so other people in the footage can be protected.

Is het certificaat geaccrediteerd of officieel erkend?

Nee. Het is een privé bewijs van deelname, alleen voor je kennis. Het is niet erkend, geaccrediteerd of goedgekeurd door een overheid, vergunningsinstantie, toezichthouder of onderwijsinstelling, en het vervangt geen wettelijk verplichte vergunning, certificering of opleiding.

Bronnen

Gerelateerde examens