CIPP-C 무료 덤프문제 온라인 액세스

A boutique hotel in Montreal seeks to attract travelers from Europe but wants to avoid becoming subject to the GDPR's requirements. Which of the following activities is most likely to result in a finding that the hotel is subject to the GDPR?

• A.Placing advertisements on travel websites accessible in Europe.
• B.Translating the hotel's registration page into German based on the visitor's IP address.
• C.Collecting contact information for foreign business leaders from public directories.
• D.Sending discount offers to guests who previously registered using a foreign address.

The Government of Canada's Directive on Privacy Impact Assessments applies to all of the following EXCEPT?

• A.The Cabinet.
• B.Crown Corporations.
• C.The Bank of Canada.
• D.The Ministry of Health

What is critical to consider when an organization responsible for a large number of records wants to outsource the storage of those records?

• A.Determining if the personal information stored on the records will be used for data matching
• B.Conducting a Privacy Impact Assessment (PIA) prior to establishing a relationship with the storage company.
• C.Putting into place a contractual agreement between the organization and the records storage company.
• D.Establishing that consent gathered from individuals by the organization in order to store their personal information was informed and meaningful.

What is required of a private sector organization that is subject to a finding by a Canadian federal or

• A.In Ontario only, apply for judicial review within a provincial court in order to accept or refute the finding.
• B.In Quebec, comply with the finding as a binding decision.
• C.Comply with findings of the Privacy Commissioner of Canada only.
• D.In all jurisdictions, adopt and apply the finding within 30 days of the published report.

What is the Canadian Courts' role in reviewing decisions by provincial oversight authorities?

• A.Look at specific types of errors made by the oversight authority such as a misinterpretation of a term in the legislation
• B.Review and compare the oversight authority's decision or recommendation against those of other oversight authorities across Canada.
• C.Review all the investigative notes of the oversight authority, such as would be gathered during interviews.
• D.Impose a prison sentence only, such as when an employee sells personal health information (PHI) for their own gain.