Does privacy law apply to security guards?

Yes. Guards collect personal information for their employer and clients, so they must follow the privacy law that applies (PIPEDA or a provincial law) and their employer's privacy policy.

Can a security guard give CCTV footage to police?

Footage can be used as the law allows, and the Privacy Commissioner's example is sharing car break-in video with police. Follow your site's procedure and document the disclosure.

What should I do if I lose a notebook or report?

Report it to your supervisor right away. It may be a privacy breach that the organization must assess and, if there is a real risk of significant harm, report.

Can people see video of themselves?

Yes, people have a right to access images of themselves. Refer the request to your supervisor or privacy officer so other people in the footage can be protected.

这份证书是否经过认证或获得官方认可？

不是。这是一份私人颁发的结业证书，仅用于知识学习。它未获得任何政府、执照发放机构、监管机构或教育机构的认可、认证或批准，也不能替代法律要求的任何执照、资格证书或培训。

Privacy and Personal Information Course 2026

第1题，共25题

Which of these is personal information?

The date of a fire drill
The make of the building's alarm panel
The number of floors in a building
A visitor's name and ID number written in a sign-in log

显示答案

答案: D. A visitor's name and ID number written in a sign-in log

Personal information is information about an identifiable person, such as a name, age or ID number.

第2题，共25题

According to the Privacy Commissioner of Canada, can opinions and evaluations about a person be personal information?

Yes, comments, evaluations and disciplinary actions about a person are personal information
Only if they are written on paper
Only if the person agrees they are true
No, only names and numbers count

显示答案

答案: A. Yes, comments, evaluations and disciplinary actions about a person are personal information

Opinions, evaluations, comments and disciplinary actions about an identifiable person are personal information.

第3题，共25题

Which organizations does PIPEDA generally apply to?

Only individuals at home
Private-sector organizations that collect, use or disclose personal information in commercial activity
Only hospitals and schools
Only federal government departments

显示答案

答案: B. Private-sector organizations that collect, use or disclose personal information in commercial activity

PIPEDA covers private-sector organizations in their commercial activities, plus federally regulated businesses.

第4题，共25题

Which provinces have private-sector privacy laws considered substantially similar to PIPEDA?

Saskatchewan, Prince Edward Island and Yukon
Ontario, Manitoba and Nova Scotia
Alberta, British Columbia and Quebec
Only Ontario

显示答案

答案: C. Alberta, British Columbia and Quebec

Organizations covered by these provincial laws are generally exempt from PIPEDA for activities within that province.

第5题，共25题

A security company operates only in Yukon. Which privacy law generally covers its commercial activities?

PIPEDA, because organizations in the territories are considered federally regulated
No privacy law at all
Quebec's law
Alberta's law

显示答案

答案: A. PIPEDA, because organizations in the territories are considered federally regulated

The Privacy Commissioner says organizations in the Northwest Territories, Yukon and Nunavut are considered federally regulated, so PIPEDA applies.

第6题，共25题

Which laws generally cover privacy at hospitals, universities and municipalities?

PIPEDA
No law
The Criminal Code
Provincial laws

显示答案

答案: D. Provincial laws

The Privacy Commissioner notes that municipalities, universities, schools and hospitals are generally covered by provincial laws.

第7题，共25题

Which of these is one of PIPEDA's 10 fair information principles?

Unlimited sharing
Keep everything forever
Collect first, decide later
Limiting collection

显示答案

答案: D. Limiting collection

The principles include accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access and challenging compliance.

第8题，共25题

A site's visitor log asks for name, company and time in. A guard also starts writing down visitors' home addresses "just in case". Which principle does this break?

Openness
Limiting collection
Accuracy
Challenging compliance

显示答案

答案: B. Limiting collection

Collect only what is needed for the identified purpose. Extra information adds risk with no benefit.

第9题，共25题

What does the safeguards principle mean for a guard's notebook and reports?

Leave them on the desk so anyone can read them
Throw them in the recycling when full
Take photos of them for a personal backup
Protect them with security that fits how sensitive they are, such as keeping them locked away

显示答案

答案: D. Protect them with security that fits how sensitive they are, such as keeping them locked away

Personal information must be protected against loss, theft and unauthorized access.

第10题，共25题

What does the accountability principle mean?

Each visitor is responsible for protecting their own data
Only the police are responsible for privacy
The organization is responsible for the personal information it controls and names someone to oversee compliance
Nobody is responsible if a breach happens

显示答案

答案: C. The organization is responsible for the personal information it controls and names someone to oversee compliance

Accountability means the organization is responsible and designates a person, often a privacy officer, to oversee compliance.

第11题，共25题

Under PIPEDA, how long does a business generally have to respond to a person's request for access to their own personal information?

7 days
6 months
1 year
30 calendar days

显示答案

答案: D. 30 calendar days

Businesses generally must respond within 30 calendar days.

第12题，共25题

When may a business extend the time to respond to an access request?

Only if the person pays a fee
In limited cases, by up to 30 more days, telling the person within the first 30 days
Whenever it likes, for any length of time
Never

显示答案

答案: B. In limited cases, by up to 30 more days, telling the person within the first 30 days

An extension of up to 30 days is allowed in limited cases, such as when meeting the deadline would seriously disrupt operations.

第13题，共25题

A person asks a guard for a copy of video showing themselves. What should the guard do?

Refuse and say people never have a right to see video
Refer the request to the supervisor or privacy officer under site policy
Hand over a copy right away on a USB stick
Show them all the footage, including other people

显示答案

答案: B. Refer the request to the supervisor or privacy officer under site policy

People have a right to access images of themselves, but requests go through the proper process so other people's identities can be protected.

第14题，共25题

According to the Privacy Commissioner's video surveillance guidelines, where should camera notice signs be placed?

Where people will see them before they enter the area being watched
Inside the camera housing
On the back of the building where no one goes
Only in the security office

显示答案

答案: A. Where people will see them before they enter the area being watched

Notice should let people know about cameras before they enter, and should include a contact for questions.

第15题，共25题

Where should security cameras never be aimed?

Parking lot entrances
Washrooms, change rooms and similar private areas
Main lobbies
Loading docks

显示答案

答案: B. Washrooms, change rooms and similar private areas

The guidelines say cameras must not be aimed at places where people expect more privacy, such as washrooms and change rooms.

第16题，共25题

According to the guidelines, when should video surveillance systems record sound?

Whenever a guard is bored
Always, to capture everything
Not unless there is a specific need
Only at night

显示答案

答案: C. Not unless there is a specific need

Audio recording is more intrusive and should not be used unless there is a specific need.

第17题，共25题

How long should recordings be kept?

Exactly one week, always
Until the hard drive is full, then deleted in bulk with no rules
Only as long as needed for the purpose, then destroyed securely
Forever, in case they are useful

显示答案

答案: C. Only as long as needed for the purpose, then destroyed securely

Keep recordings only as long as necessary for their purpose and destroy them securely when no longer needed.

第18题，共25题

When cameras are watched live by an operator, when do the guidelines suggest recording should be turned on?

Only when the operator takes a break
Never
Only when unlawful activity is suspected or observed
Only on weekends

显示答案

答案: C. Only when unlawful activity is suspected or observed

Limiting recording reduces the amount of personal information collected.

第19题，共25题

A building manager asks a guard to use parking garage video to track when one tenant comes and goes. What is the right answer?

Agree, but only for one week
Decline, because footage should be used only for its stated purpose or as the law allows
Agree, because the manager is the client
Post the times on the lobby board

显示答案

答案: B. Decline, because footage should be used only for its stated purpose or as the law allows

The guidelines give tracking tenants' movements as an example of misuse.

第20题，共25题

A police officer asks a guard for a copy of footage. What should the guard do?

Follow site procedure, involve the supervisor if required, and record what was given, to whom and why
Refuse to speak to the officer
Delete the footage to avoid problems
Give the officer the whole system password

显示答案

答案: A. Follow site procedure, involve the supervisor if required, and record what was given, to whom and why

Disclosures outside the organization should be justified and documented. Sites usually have a process for police requests.

第21题，共25题

A guard loses a notebook containing residents' names and phone numbers. What should the guard do first?

Wait to see if anyone complains
Rewrite the notebook from memory
Report it to the supervisor right away
Say nothing and buy a new notebook

显示答案

答案: C. Report it to the supervisor right away

A lost notebook may be a privacy breach. Reporting quickly lets the organization reduce harm and meet its legal duties.

第22题，共25题

Under PIPEDA, when must a business report a breach to the Privacy Commissioner and notify the people affected?

Only when more than 1,000 people are affected
When it is reasonable to believe the breach creates a real risk of significant harm
Never, if the breach was an accident
Only when the media finds out

显示答案

答案: B. When it is reasonable to believe the breach creates a real risk of significant harm

The test is a real risk of significant harm, whatever the number of people affected.

第23题，共25题

Which of these does the Privacy Commissioner list as "significant harm"?

Humiliation or damage to reputation
Seeing a camera notice sign
A short delay in getting a parking pass
Having to sign in at the front desk

显示答案

答案: A. Humiliation or damage to reputation

Significant harm includes bodily harm, humiliation, damage to reputation, financial loss, identity theft and loss of employment opportunities.

第24题，共25题

How long must a business subject to PIPEDA keep a record of every breach of security safeguards?

It does not need to keep records
Until the next audit
24 months after it decides the breach happened
30 days

显示答案

答案: C. 24 months after it decides the breach happened

The Breach of Security Safeguards Regulations require a record of every breach for 24 months, whether or not it was reportable.

第25题，共25题

A guard wants to photograph an incident. What is the best practice?

Use a personal phone and keep the photos
Use an employer-approved device and follow policy, rather than storing images on a personal phone
Post the photos to warn the public
Share the photos in a group chat with friends

显示答案

答案: B. Use an employer-approved device and follow policy, rather than storing images on a personal phone

Personal phones are hard to secure and easy to share from. Use approved devices so images stay protected.

Privacy and Personal Information Course 2026

快速解答

你将学到什么

考前须知

常见问题

资料来源

相关测试