Certified Information Privacy Professional/ Canada (CIPP/C): CIPP-C

What is critical to consider when an organization responsible for a large number of records wants to outsource the storage of those records?

A. Determining if the personal information stored on the records will be used for data matching.

B. Putting into place a contractual agreement between the organization and the records storage company.

C. Conducting a Privacy Impact Assessment (PIA) prior to establishing a relationship with the storage company.

D. Establishing that consent gathered from individuals by the organization in order to store their personal information was informed and meaningful.

Which statement is FALSE regarding the provisions of the Employee Polygraph Protection Act of 1988 (EPPA)?

A. The EPPA requires that employers post essential information about the Act in a conspicuous location.

B. The EPPA includes an exception that allows polygraph tests in professions in which employee honesty is necessary for public safety.

C. Employers are prohibited from administering psychological testing based on personality traits such as honesty, preferences or habits.

D. Employers involved in the manufacture of controlled substances may terminate employees based on polygraph results if other evidence exists.

What practice does the USA FREEDOM Act NOT authorize?

A. Emergency exceptions that allows the government to target roamers

B. An increase in the maximum penalty for material support to terrorism

C. An extension of the expiration for roving wiretaps

D. The bulk collection of telephone data and internet metadata