CIPP-C IAPP Exam Lab Questions

Under the Freedom of Information and Protection of Privacy Acts (FIPPA), personal information typically includes details that are about an identifiable individual. This can include information about an individual's creditworthiness, employment history, and character references, as these relate directly to the person. However, information about an individual's home business does not generally qualify as personal information under FIPPA because it pertains more to their commercial activities rather than their personal life or identity. Therefore, the correct answer is A, "Information about an individual’s home business."

British Columbia's health information privacy laws are encapsulated in the Personal Information Protection Act (PIPA) and the E-Health (Personal Health Information Access and Protection of Privacy) Act for electronic health records. Unlike health information privacy acts in some other provinces which cover a wide range of health sector participants, BC’s laws are distinct in not directly including certain types of health facilities like independent laboratories and nursing homes under the same stringent requirements as other health care providers. These facilities may be covered under different aspects of legislation or have specific regulations but are not grouped under the typical health information custodian category in the same way as they are in provinces that use terms like "custodian" extensively. This specificity aligns with the statement in option C.

For a provincial law to be considered substantially similar to the Personal Information Protection and Electronic Documents Act (PIPEDA), it must consist of consistency with the ten privacy principles, an independent oversight body, and a redress mechanism. This criterion is set by the federal government to ensure that provincial privacy laws provide a comparable level of protection as PIPEDA. If a provincial privacy law meets these standards, it is declared substantially similar, which allows it to supersede PIPEDA within that province for private sector data handling. This framework helps to maintain a uniform standard of privacy protection across Canada while allowing for regional adaptations.

The Access to Information Act includes references to the Privacy Act, as both pieces of legislation are closely related and often work in conjunction to govern the information management practices of federal institutions in Canada. The Access to Information Act provides a framework through which individuals can request access to records under the control of a government institution, whereas the Privacy Act focuses on the personal information held by these institutions and the privacy rights of individuals regarding their personal information. Together, these acts ensure that government handling of information is both transparent and respectful of privacy rights.