IAPP CIPP-C Actual Free Exam Questions & Community Discussion

Exam Code/Number: CIPP-C
Exam Name/Title: Certified Information Privacy Professional/ Canada (CIPP/C)
Certification Provider: IAPP
Corresponding Certification: Certified Information Privacy Professional

Exam Questions: 78
Updated On: Jun 02, 2026

Question #9

According to the Canadian Standards Association (CSA) Model Code, how long should personal information be retained?

A. Personal information should be retained as long as necessary for the fulfillment of the purpose of the collection.

B. Personal information should not be retained at all.

C. Personal information should be retained for at least two years after the last administrative use.

D. Personal information should be retained indefinitely as long as consent has been given.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #10

According to the Voluntary Code of Conduct on the Responsible Development and Management of Advanced Generative AI Systems, signatories commit to doing all of the following EXCEPT?

A. Supporting public awareness and education on Al.

B. Contributing to the development and application of Al standards.

C. Adopting low-risk uses of AI.

D. Sharing information and best practices of Al governance.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #11

Which of the following incidents will require reporting to OPC?

A. As part of a freedom of information request, a nursing home that released an e-mail with everybody's e-mail address in the "to" section unredacted.

B. An organization's point-of-sale system that was subject to an attempted hack that was blocked by the organization's firewall.

C. A file with client ID, sales amount and sales date that was sent to the wrong processors who cannot identify the clients.

D. A sales report with aggregated information that was sent to the wrong person internally.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #12

According to the Canadian Standards Association (CSA) Model Code, how long should personal information be retained?

A. Personal information should be retained as long as necessary for the fulfillment of the purpose of the collection.

B. Personal information should not be retained at all.

C. Personal information should be retained for at least two years after the last administrative use.

D. Personal information should be retained indefinitely as long as consent has been given.

Discussion 0

Correct Answer: A Vote an answer

Question #13

In Ontario, personal information can be withheld from disclosure in a Freedom of Information (FOI) request.
The following information is included in a record that is the subject of a FOI request being handled by a hospital: employee name, employee title, employee designation, employee educational history, employee personal cell phone number, and feedback about the employee from a colleague.
Which of the following statements is accurate regarding what can be released?

A. No employee information can be released as it is information that was collected throughout the course of employment.

B. Employee name, title, and designation can be released as it is not classified as personal information.

C. Employee name and title can only be released if the employee consents

D. The employee designation is not to be released as it is considered employment history.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #14

What is required of a private sector organization that is subject to a finding by a Canadian federal or

A. Comply with findings of the Privacy Commissioner of Canada only.

B. In all jurisdictions, adopt and apply the finding within 30 days of the published report.

C. In Quebec, comply with the finding as a binding decision.

D. In Ontario only, apply for judicial review within a provincial court in order to accept or refute the finding.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #15

Which organization was the primary influence in the development of Canadian privacy with their publication of a set of eight privacy principles?

A. The Canadian Institute of Chartered Accountants

B. The Organization for Economic Co-operation and Development (OECD).

C. The Center for Democracy and Technology (CRT)

D. The Canadian Standards Association (CSA).

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #16

What is the Generally Accepted Privacy Principles (GAPP) framework?

A. An information management model that is widely recognized across many Canadian industries.

B. A comprehensive guide for industry best practices as delineated by the Canadian federal Privacy Commissioner.

C. A template for Privacy Impact Assessments (PIAs) that are conducted within private sector organizations in Canada.

D. A principles-based privacy approach advocated by Canada's leading accounting industry group and its

E. S.-based counterpart.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Download Free IAPP CIPP-C Demo

Simply submit your e-mail address below to get started with our free demo of your IAPP CIPP-C exam.