Free IAPP CIPP-C Exam Dumps Questions & Answers

In Ontario, a patient attends an appointment with a physician and reveals information about some new symptoms that she has been experiencing. Based on this information, the physician diagnoses the patient with a condition and prepares the report detailing the applicable history and diagnosis. The report is added to the patient's record. The patient later regrets revealing certain facts and doesn't want anyone else to know about these symptoms or the diagnosis. She acknowledges that the information she provided was correct and does not question the diagnosis.
Which of the following requests would the patient be most successful at pursuing?

• A.That the information be restricted from disclosure to other health care providers.
• B.That a correction be made to change the diagnosis based on the patient's wishes.
• C.That a copy of the record be kept by the patient for disclosure to physicians.
• D.That details of the diagnosis be deleted from the patient's health record.

The process of de-identification where new data elements are substituted for identifying information is?

• A.Anonymization.
• B.Encryption.
• C.Shuffling.
• D.Pseudonymization.

What can be concluded from the Blood Tribe case regarding the Privacy Commissioner's access to information?

• A.The commissioner cannot ask an organization to prove that a document is privileged.
• B.The commissioner can compel the production of all documents that are relevant to the investigation.
• C.The commissioner cannot receive information unless it is gathered under oath.
• D.The commissioner can officially request proof that desired information is subject to solicitor-client privilege.

Which action will help a business prove compliance under Canada's Anti-Spam Legislation (CASL)?

• A.Providing an opt-out mechanism.
• B.Posting a list of CASL guidelines on a company's website for customers to read.
• C.Demonstrating the dissolution of a personal relationship before communication was sent.
• D.Keeping records of express and implied consent of commercial electronic messages.

The movement toward comprehensive privacy and data protection laws can be attributed to a combination of three major factors: the need to remedy past injustices, the need to promote a digital economy and the need to ensure consistency with?

• A.Self-regulatory laws.
• B.Global laws.
• C.Pan-Asian laws.
• D.Pan-European laws.