PassEveryTest
Svenska

Privacy and Personal Information Course 2026

This course is for security guards who handle visitor logs, ID checks, reports and CCTV. It explains what personal information is, which privacy laws apply in Canada, the 10 fair information principles, video surveillance guidelines, access requests and what to do about privacy breaches.

  • Kurs
  • Kanada
  • 25 frågor
  • Kontrollerad 11 oktober 2026

Kort svar

Den här gratiskursen har lektioner på cirka 10 minuter och ett prov med 25 frågor. Med minst 80 % kan du ladda ner ett kursintyg (privat, inte ackrediterat). Kontrollerad mot officiella källor den 11 oktober 2026.

Börja med lektionernaPrivacy and Personal Information: Lessons: cirka 10 minuters läsning. Alla provfrågor tas upp i lektionerna.

Det här lär du dig

  • Identify personal information in everyday security work
  • Explain which privacy law applies in different provinces
  • Apply the 10 fair information principles on the job
  • Follow good practice for video surveillance
  • Handle access requests and report privacy breaches

Få minst 80 % för att ladda ner ditt certifikat.

  1. Fråga 1 av 25

    Which of these is personal information?
    Visa svar

    Svar: D. A visitor's name and ID number written in a sign-in log

    Personal information is information about an identifiable person, such as a name, age or ID number.

  2. Fråga 2 av 25

    According to the Privacy Commissioner of Canada, can opinions and evaluations about a person be personal information?
    Visa svar

    Svar: A. Yes, comments, evaluations and disciplinary actions about a person are personal information

    Opinions, evaluations, comments and disciplinary actions about an identifiable person are personal information.

  3. Fråga 3 av 25

    Which organizations does PIPEDA generally apply to?
    Visa svar

    Svar: B. Private-sector organizations that collect, use or disclose personal information in commercial activity

    PIPEDA covers private-sector organizations in their commercial activities, plus federally regulated businesses.

  4. Fråga 4 av 25

    Which provinces have private-sector privacy laws considered substantially similar to PIPEDA?
    Visa svar

    Svar: C. Alberta, British Columbia and Quebec

    Organizations covered by these provincial laws are generally exempt from PIPEDA for activities within that province.

  5. Fråga 5 av 25

    A security company operates only in Yukon. Which privacy law generally covers its commercial activities?
    Visa svar

    Svar: A. PIPEDA, because organizations in the territories are considered federally regulated

    The Privacy Commissioner says organizations in the Northwest Territories, Yukon and Nunavut are considered federally regulated, so PIPEDA applies.

  6. Fråga 6 av 25

    Which laws generally cover privacy at hospitals, universities and municipalities?
    Visa svar

    Svar: D. Provincial laws

    The Privacy Commissioner notes that municipalities, universities, schools and hospitals are generally covered by provincial laws.

  7. Fråga 7 av 25

    Which of these is one of PIPEDA's 10 fair information principles?
    Visa svar

    Svar: D. Limiting collection

    The principles include accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access and challenging compliance.

  8. Fråga 8 av 25

    A site's visitor log asks for name, company and time in. A guard also starts writing down visitors' home addresses "just in case". Which principle does this break?
    Visa svar

    Svar: B. Limiting collection

    Collect only what is needed for the identified purpose. Extra information adds risk with no benefit.

  9. Fråga 9 av 25

    What does the safeguards principle mean for a guard's notebook and reports?
    Visa svar

    Svar: D. Protect them with security that fits how sensitive they are, such as keeping them locked away

    Personal information must be protected against loss, theft and unauthorized access.

  10. Fråga 10 av 25

    What does the accountability principle mean?
    Visa svar

    Svar: C. The organization is responsible for the personal information it controls and names someone to oversee compliance

    Accountability means the organization is responsible and designates a person, often a privacy officer, to oversee compliance.

  11. Fråga 11 av 25

    Under PIPEDA, how long does a business generally have to respond to a person's request for access to their own personal information?
    Visa svar

    Svar: D. 30 calendar days

    Businesses generally must respond within 30 calendar days.

  12. Fråga 12 av 25

    When may a business extend the time to respond to an access request?
    Visa svar

    Svar: B. In limited cases, by up to 30 more days, telling the person within the first 30 days

    An extension of up to 30 days is allowed in limited cases, such as when meeting the deadline would seriously disrupt operations.

  13. Fråga 13 av 25

    A person asks a guard for a copy of video showing themselves. What should the guard do?
    Visa svar

    Svar: B. Refer the request to the supervisor or privacy officer under site policy

    People have a right to access images of themselves, but requests go through the proper process so other people's identities can be protected.

  14. Fråga 14 av 25

    According to the Privacy Commissioner's video surveillance guidelines, where should camera notice signs be placed?
    Visa svar

    Svar: A. Where people will see them before they enter the area being watched

    Notice should let people know about cameras before they enter, and should include a contact for questions.

  15. Fråga 15 av 25

    Where should security cameras never be aimed?
    Visa svar

    Svar: B. Washrooms, change rooms and similar private areas

    The guidelines say cameras must not be aimed at places where people expect more privacy, such as washrooms and change rooms.

  16. Fråga 16 av 25

    According to the guidelines, when should video surveillance systems record sound?
    Visa svar

    Svar: C. Not unless there is a specific need

    Audio recording is more intrusive and should not be used unless there is a specific need.

  17. Fråga 17 av 25

    How long should recordings be kept?
    Visa svar

    Svar: C. Only as long as needed for the purpose, then destroyed securely

    Keep recordings only as long as necessary for their purpose and destroy them securely when no longer needed.

  18. Fråga 18 av 25

    When cameras are watched live by an operator, when do the guidelines suggest recording should be turned on?
    Visa svar

    Svar: C. Only when unlawful activity is suspected or observed

    Limiting recording reduces the amount of personal information collected.

  19. Fråga 19 av 25

    A building manager asks a guard to use parking garage video to track when one tenant comes and goes. What is the right answer?
    Visa svar

    Svar: B. Decline, because footage should be used only for its stated purpose or as the law allows

    The guidelines give tracking tenants' movements as an example of misuse.

  20. Fråga 20 av 25

    A police officer asks a guard for a copy of footage. What should the guard do?
    Visa svar

    Svar: A. Follow site procedure, involve the supervisor if required, and record what was given, to whom and why

    Disclosures outside the organization should be justified and documented. Sites usually have a process for police requests.

  21. Fråga 21 av 25

    A guard loses a notebook containing residents' names and phone numbers. What should the guard do first?
    Visa svar

    Svar: C. Report it to the supervisor right away

    A lost notebook may be a privacy breach. Reporting quickly lets the organization reduce harm and meet its legal duties.

  22. Fråga 22 av 25

    Under PIPEDA, when must a business report a breach to the Privacy Commissioner and notify the people affected?
    Visa svar

    Svar: B. When it is reasonable to believe the breach creates a real risk of significant harm

    The test is a real risk of significant harm, whatever the number of people affected.

  23. Fråga 23 av 25

    Which of these does the Privacy Commissioner list as "significant harm"?
    Visa svar

    Svar: A. Humiliation or damage to reputation

    Significant harm includes bodily harm, humiliation, damage to reputation, financial loss, identity theft and loss of employment opportunities.

  24. Fråga 24 av 25

    How long must a business subject to PIPEDA keep a record of every breach of security safeguards?
    Visa svar

    Svar: C. 24 months after it decides the breach happened

    The Breach of Security Safeguards Regulations require a record of every breach for 24 months, whether or not it was reportable.

  25. Fråga 25 av 25

    A guard wants to photograph an incident. What is the best practice?
    Visa svar

    Svar: B. Use an employer-approved device and follow policy, rather than storing images on a personal phone

    Personal phones are hard to secure and easy to share from. Use approved devices so images stay protected.

Bra att veta före provet

  • PIPEDA covers private-sector organizations that collect, use or disclose personal information in commercial activity; Alberta, British Columbia and Quebec have substantially similar private-sector laws.
  • PIPEDA is built on 10 fair information principles, including limiting collection, safeguards and individual access.
  • The Privacy Commissioner's video surveillance guidelines say cameras must not be aimed at washrooms or change rooms, and recordings should be kept only as long as needed.
  • A business generally has 30 calendar days to respond to a request for access to personal information, with a possible extension of up to 30 more days.
  • Breaches creating a real risk of significant harm must be reported to the Privacy Commissioner, and records of every breach must be kept for 24 months.

Vanliga frågor

Does privacy law apply to security guards?

Yes. Guards collect personal information for their employer and clients, so they must follow the privacy law that applies (PIPEDA or a provincial law) and their employer's privacy policy.

Can a security guard give CCTV footage to police?

Footage can be used as the law allows, and the Privacy Commissioner's example is sharing car break-in video with police. Follow your site's procedure and document the disclosure.

What should I do if I lose a notebook or report?

Report it to your supervisor right away. It may be a privacy breach that the organization must assess and, if there is a real risk of significant harm, report.

Can people see video of themselves?

Yes, people have a right to access images of themselves. Refer the request to your supervisor or privacy officer so other people in the footage can be protected.

Är intyget ackrediterat eller officiellt erkänt?

Nej. Det är ett privat kursintyg, bara för dina kunskaper. Det är inte erkänt, ackrediterat eller godkänt av någon myndighet, tillståndsmyndighet, tillsynsmyndighet eller utbildningsinstitution, och det ersätter inte någon licens, certifiering eller utbildning som krävs enligt lag.

Källor

Relaterade prov