EMT Practice Test

1. Question Content...

---

Question1: In 2007, four employees of TELUS Communications Corporation filed a complaint with the Privacy Commissioner of Canada in connection with the collection of what personal information?

Question2: An Alberta woman finds errors about her personal information while reviewing paperwork at a local real estate firm. According to Canadian Standards Association (CSA) principles, how should the firm respond to these errors?

Question3: A boutique hotel in Montreal seeks to attract travelers from Europe but wants to avoid becoming subject to the GDPR's requirements. Which of the following activities is most likely to result in a finding that the hotel is subject to the GDPR?

Question4: Work-product information is generally thought of as information about an individual that?

Question5: Which of the following existing frameworks is least effective in addressing emerging AI issues while specific AI legislation is being decided?

Question6: According to the Voluntary Code of Conduct on the Responsible Development and Management of Advanced Generative AI Systems, signatories commit to doing all of the following EXCEPT?

Question7: What is a difference between the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Personal Information Privacy Act (PIPA) of both Alberta and British Columbia?

Question8: What is critical to consider when an organization responsible for a large number of records wants to outsource the storage of those records?

Question9: As response to TJX Winners - Homesense, why is "hashing" preferable to storing a personal identifier such as a driver's license number?

Question10: Which of the following describes a difference between the federal Privacy Commissioner and provincial commissioners?

Question11: The movement toward comprehensive privacy and data protection laws can be attributed to a combination of three major factors: the need to remedy past injustices, the need to promote a digital economy and the need to ensure consistency with?

Question12: All items below could be considered sensitive personal information, EXCEPT?

Question13: According to the federal Privacy Commissioner, what protection is missing from the Privacy Act regarding outsourcing of government work that contains personal information?

Question14: What is required for a provincial law to be considered substantially similar to the Personal Information Protection and Electronic Documents Act (PIPEDA)?

Question15: What is the Generally Accepted Privacy Principles (GAPP) framework?

Question16: Under PIPEDA, each of the following situations requires an organization to obtain express consent to use personal information EXCEPT?

Question17: In what situation is the federal Privacy Commissioner authorized to proceed to federal court?

Question18: The process of de-identification where new data elements are substituted for identifying information is?

Question19: According to the Alberta Personal Information Protection Act, which of the following data breach reporting notifications to the commissioner is NOT automatically triggered when real risk of significant harm (RROSH) has been determined?

Question20: What is the primary motivation for a federal government entity to complete a Privacy Impact Assessment (PIA)?

Question21: Which is NOT a Canadian Standards Association (CSA) Privacy Principle?

Question22: Under PIPEDA, each of the following are considered to be personal information EXCEPT?

Question23: What must an organization do to fulfill the Personal Information Protection and Electronic Documents Act's (PIPEDA) transparency requirements when transferring personal information to a foreign country?

Question24: A company wants to invest in DEI initiatives within their organization and plans to survey employees by asking for locality, age, salary, gender, ethnicity, religion, sexual orientation, physical/mental disabilities, department, and job level.
The best solution to protect the personal information collected in the survey is to?

Question25: Of the key principles in the Personal Information Protection and Electronic Documents Act (PIPEDA), which principle in particular contributes to the increase in privacy policies in recent years?

Question26: A new client is opening a Registered Retirement Savings Plan. Their investment advisor asks for their social insurance number (SIN). The advisor must tell the client that because they are opening a tax reporting product, their SIN is mandatory for tax reporting purposes and?

Question27: Under the Privacy Act, when government institutions collect personal information?

Question28: Which question is NOT part of the Office of the Privacy Commissioner of Canada's (OPC's) four-point test for establishing whether providing access to genetic testing results goes beyond what is necessary or reasonable?

Question29: In Ontario, personal information can be withheld from disclosure in a Freedom of Information (FOI) request.
The following information is included in a record that is the subject of a FOI request being handled by a hospital: employee name, employee title, employee designation, employee educational history, employee personal cell phone number, and feedback about the employee from a colleague.
Which of the following statements is accurate regarding what can be released?

Question30: A small commercial business in Canada was preparing a mailing to its customers when the letters and the envelopes were mismatched, causing 500 of 1000 letters to be sent to the wrong recipients. The letters contained the name and mailing address of the clients as well as account numbers and account balances.
The business has discovered this error as clients called to report receiving the wrong letter and expressing concern that their information has been breached. Which of the following is the most appropriate next step to take?

Question31: After an investigation under the Privacy Act, the Privacy Commissioner could do any of the following EXCEPT?

Question32: What must a federal government department do before it implements an electronic service (e-service)?

Question33: Which health information custodians may NOT rely on an implied consent model under Ontario's Personal Health Information Protection Act (PHIPA)?

Question34: Which of these employees would be subject to the Personal Information Protection and Electronic Documents Act (PIPEDA)?