CISSP · Question #961
One of Canada's leading pharmaceutical firms recently hired a Chief Data Officer (CDO) to oversee its data privacy program. The CDO has discovered the firm's marketing department has been collecting i
The correct answer is D. The Personal Information Protection and Electronic Documents Act (PIPEDA). PIPEDA is Canada's federal privacy law governing the collection, use, and disclosure of personal information by private sector organizations. It sets out rules for how organizations must handle individuals' personal information, including obtaining consent for the collection and
Question
One of Canada's leading pharmaceutical firms recently hired a Chief Data Officer (CDO) to oversee its data privacy program. The CDO has discovered the firm's marketing department has been collecting information from individuals without their knowledge and consent via the company website. Which of the following privacy regulations should concern the CDO regarding this practice?
Options
- AThe Health Insurance Portability and Accountability Act (HIPAA)
- BThe Privacy Act of 1974
- CThe Fair Information Practice Principles (FIPPs)
- DThe Personal Information Protection and Electronic Documents Act (PIPEDA)
How the community answered
(35 responses)- A3% (1)
- C3% (1)
- D94% (33)
Explanation
PIPEDA is Canada's federal privacy law governing the collection, use, and disclosure of personal information by private sector organizations. It sets out rules for how organizations must handle individuals' personal information, including obtaining consent for the collection and use of personal data. Violating PIPEDA by collecting information without consent can result in significant penalties and fines. Therefore, the CDO should be concerned about ensuring compliance with PIPEDA and rectifying the unauthorized data collection practice.
Topics
Community Discussion
No community discussion yet for this question.