Protecting Workplace Information Course: Personal information and Canadian privacy law

1. Pytanie 1 z 16

   A personnel file holds these items. Which one is personal information?

   • AThe company's head office address
   • BThe date the office was last painted
   • CThe number of desks on the second floor of the office
   • DA supervisor's written evaluation of the employee
   Pokaż odpowiedź

   Odpowiedź: D. A supervisor's written evaluation of the employee

   Under PIPEDA, opinions and evaluations about an identifiable person are personal information.

2. Pytanie 2 z 16

   Does information have to be written down to count as personal information under PIPEDA?

   • ANo, it can be recorded or not recorded
   • BYes, it must be saved in a computer system
   • CYes, it must be written on paper
   • DYes, it must be signed by the person
   Pokaż odpowiedź

   Odpowiedź: A. No, it can be recorded or not recorded

   PIPEDA defines personal information as information about an identifiable person, whether or not it is recorded.

3. Pytanie 3 z 16

   Which kind of information is generally outside PIPEDA when it is used only to reach someone about their job?

   • AA record of a person's income
   • BBusiness contact information, such as a work phone number
   • CA home address that is kept in an employee's personnel file
   • DA copy of a person's medical record
   Pokaż odpowiedź

   Odpowiedź: B. Business contact information, such as a work phone number

   PIPEDA does not cover business contact information used only to communicate with someone about their job or profession.

4. Pytanie 4 z 16

   A security company works only in Ontario and collects customer information in its business. Which privacy law usually applies?

   • APIPEDA
   • BOntario's private-sector privacy law
   • CNo privacy law applies to small businesses
   • DThe federal Privacy Act
   Pokaż odpowiedź

   Odpowiedź: A. PIPEDA

   Ontario does not have a substantially similar private-sector law, so PIPEDA covers commercial activity there.

5. Pytanie 5 z 16

   A retail chain works only inside Alberta. Which law usually covers the customer information it collects?

   • APIPEDA
   • BQuebec's private-sector law, since it covers all of Canada
   • CAlberta's own private-sector privacy law
   • DThe federal Privacy Act
   Pokaż odpowiedź

   Odpowiedź: C. Alberta's own private-sector privacy law

   Alberta, British Columbia and Quebec have private-sector laws considered substantially similar to PIPEDA, which apply instead inside those provinces.

6. Pytanie 6 z 16

   A bank has employees in Quebec. Which law covers the bank's employee information?

   • AThe federal Privacy Act
   • BQuebec's private-sector law, since the employees work in Quebec
   • CNo law covers employee records
   • DPIPEDA, because banks are federally regulated
   Pokaż odpowiedź

   Odpowiedź: D. PIPEDA, because banks are federally regulated

   Federally regulated organizations such as banks are always subject to PIPEDA, including for their employees' information.

7. Pytanie 7 z 16

   Which law covers how federal government institutions handle personal information?

   • AThe Bank Act
   • BEach province's health information law
   • CPIPEDA
   • DThe Privacy Act
   Pokaż odpowiedź

   Odpowiedź: D. The Privacy Act

   The Privacy Act applies to federal government institutions; PIPEDA covers private-sector commercial activity.

8. Pytanie 8 z 16

   Which four provinces have health information laws declared substantially similar to PIPEDA?

   • AOntario, Manitoba, Saskatchewan and Prince Edward Island
   • BOntario, New Brunswick, Nova Scotia, and Newfoundland and Labrador
   • CNew Brunswick, Nova Scotia, Prince Edward Island, and Newfoundland and Labrador
   • DAlberta, British Columbia, Quebec and Manitoba
   Pokaż odpowiedź

   Odpowiedź: B. Ontario, New Brunswick, Nova Scotia, and Newfoundland and Labrador

   The OPC lists Ontario, New Brunswick, Nova Scotia, and Newfoundland and Labrador for substantially similar health laws.

9. Pytanie 9 z 16

   Which office oversees PIPEDA?

   • AThe Competition Bureau
   • BThe labour standards office in each province and territory
   • CThe Canadian Centre for Cyber Security
   • DThe Office of the Privacy Commissioner of Canada
   Pokaż odpowiedź

   Odpowiedź: D. The Office of the Privacy Commissioner of Canada

   The Office of the Privacy Commissioner of Canada oversees both PIPEDA and the Privacy Act.

10. Pytanie 10 z 16

    Which PIPEDA principle says to collect only the information needed for an identified purpose?

    • AChallenging compliance
    • BOpenness
    • CAccuracy
    • DLimiting collection
    Pokaż odpowiedź

    Odpowiedź: D. Limiting collection

    Limiting collection means collecting only what is needed for the stated purpose, by fair and lawful means.

11. Pytanie 11 z 16

    Which PIPEDA principle requires an organization to name a person responsible for privacy compliance?

    • AAccountability
    • BIdentifying purposes
    • CConsent
    • DSafeguards
    Pokaż odpowiedź

    Odpowiedź: A. Accountability

    Under accountability, an organization appoints someone responsible for compliance, sets policies and trains staff.

12. Pytanie 12 z 16

    A clinic collected patients' phone numbers to book appointments. A receptionist wants to use them to advertise her own side business. Which principle would this break?

    • ALimiting use, disclosure and retention
    • BOpenness
    • CAccuracy
    • DIndividual access
    Pokaż odpowiedź

    Odpowiedź: A. Limiting use, disclosure and retention

    Personal information may be used only for the purpose it was collected for unless the person consents or the law requires otherwise.

13. Pytanie 13 z 16

    Your team keeps four lists. Which one holds the most sensitive kind of personal information?

    • ANotes about employees' medical accommodations
    • BThe weekly schedule of staff shift start times
    • CStaff members' preferred first names
    • DStaff members' desk phone extensions
    Pokaż odpowiedź

    Odpowiedź: A. Notes about employees' medical accommodations

    Health information is generally treated as sensitive and needs stronger safeguards.

14. Pytanie 14 z 16

    Which of these is an organizational safeguard?

    • AStaff training and confidentiality agreements
    • BLocked filing cabinets
    • CAn alarm system on the file room
    • DEncryption on all laptops and phones that leave the office
    Pokaż odpowiedź

    Odpowiedź: A. Staff training and confidentiality agreements

    Organizational safeguards include clearances, limiting access, training and agreements; locks and alarms are physical, and encryption is technological.

15. Pytanie 15 z 16

    Your company sends customer records to an outside firm for processing. Who is responsible for protecting the records?

    • AThe customers, because it is their information
    • BOnly the outside firm, once it receives them
    • CYour company stays responsible for them
    • DNobody, until a breach happens
    Pokaż odpowiedź

    Odpowiedź: C. Your company stays responsible for them

    Under accountability, an organization remains responsible for personal information it transfers to a third party for processing.

16. Pytanie 16 z 16

    A sign-in sheet at a community hall lists only first and last names. It is for a support group for people with addictions. Why is the sheet sensitive?

    • AAll lists of names are sensitive under PIPEDA
    • BIt is not personal information because it has no ID numbers
    • CThe context reveals private facts about the people listed
    • DAny list with more than 10 names is sensitive
    Pokaż odpowiedź

    Odpowiedź: C. The context reveals private facts about the people listed

    The OPC says any information can be sensitive depending on the context; here, being on the list reveals something private.

Klawiatura: 1–4, aby odpowiedzieć, Enter – następne pytanie.