2 packs: 15% off with code BUY2. 3 or more: 20% off with code BUY3.

IAPP CIPP/C Exam Practice Questions, practice question pack
IAPP · CIPP/C

IAPP CIPP/C Exam Practice Questions

99% pass rateUpdated 1 Nov 202676 questions2 PDFs by email

US$39

Every question with the correct answer and why the other options are wrong.

Download the free sample

Card, Apple Pay, Google Pay or PayPal. Your PDF is prepared and emailed to you after checkout, usually within a few hours.

99% pass rate. Pass or your money back.Fail the exam after using this pack and we refund it, or swap it for any other pack. How the guarantee works
Category:
TRY BEFORE YOU BUY

Three of the 76 questions in this pack

Question 1

Which question is NOT part of the Office of the Privacy Commissioner of Canada’s (OPC’s) four-point test for establishing whether providing access to genetic testing results goes beyond what is necessary or reasonable?

  1. Are there less privacy-invasive alternatives?
  2. Are the collection and the use proportionate to the benefits gained?
  3. Are the validity and accuracy of individual test results guaranteed to be accurate?
  4. Is the personal information likely to be effective in achieving a legitimate business purpose?
Show answer and explanation

Correct answer: C. Are the validity and accuracy of individual test results guaranteed to be accurate?

The OPC's four-point test for genetic testing access focuses on necessity and reasonableness through: less privacy-invasive alternatives, proportionality of collection and use to benefits, and effectiveness in achieving legitimate business purposes. The guarantee of validity and accuracy of individual test results is not part of this established test framework; it addresses technical accuracy rather than privacy proportionality.

Why the other options are wrong

  • A. This is one of the four questions in the OPC's test.
  • B. This is one of the four questions in the OPC's test.
  • D. This is one of the four questions in the OPC's test.

Question 2

What is required of a private sector organization that is subject to a finding by a Canadian federal or provincial Privacy Commissioner?

  1. In Québec, comply with the finding as a binding decision.
  2. Comply with findings of the Privacy Commissioner of Canada only.
  3. In all jurisdictions, adopt and apply the finding within 30 days of the published report.
  4. In Ontario only, apply for judicial review within a provincial court in order to accept or refute the finding.
Show answer and explanation

Correct answer: A. In Québec, comply with the finding as a binding decision.

In Québec, findings by the Privacy Commissioner constitute binding decisions that organizations must comply with. This reflects Québec's distinct civil law framework and the authority granted to its commissioner under provincial privacy legislation. Other jurisdictions handle commissioner findings differently, typically through recommendations rather than binding orders.

Why the other options are wrong

  • B. Provincial Privacy Commissioners also issue findings that organizations must address, not only the federal OPC.
  • C. The 30-day requirement is not a standard across all jurisdictions for compliance with commissioner findings.
  • D. Ontario does not require judicial review applications to accept or comply with commissioner findings; findings are typically implemented through organizational compliance, not court proceedings.

Question 3

After an investigation under the Privacy Act, the Privacy Commissioner could do any of the following EXCEPT?

  1. Proceed to federal court to determine if the institution improperly withheld information from an individual.
  2. Order an institution to take remedial action if it determines that the Act has been breached.
  3. Recommend solutions to institutions to address identified shortcomings.
  4. Compel institutions to give oral or written evidence.
Show answer and explanation

Correct answer: B. Order an institution to take remedial action if it determines that the Act has been breached.

Under the Privacy Act, the Commissioner cannot order an institution to take remedial action. The Commissioner's powers are investigative and recommendatory in nature. The Commissioner can proceed to federal court regarding improper withholding, recommend solutions to address shortcomings, and compel institutions to provide evidence during investigations, but lacks the statutory authority to issue binding remedial orders.

Why the other options are wrong

  • A. The Commissioner can proceed to federal court to determine if information was improperly withheld.
  • C. The Commissioner regularly recommends solutions to institutions based on investigation findings.
  • D. The Commissioner has the power to compel oral or written evidence as part of the investigation process.

See all 19 free questions Get the full pack, US$39

How much of the IAPP CIPP/C bank is free?

76 questions in the bank

Each step includes the one before, so buying only adds new questions.

  • You are here10questionsFree sampleThree on this page, all ten as a PDF.Download the sample
  • 1925% of the bankPractice pageFree on the site, every answer explained.Go to the practice page
  • 38the first half of the packHalf PackFree by email, as one PDF, every answer explained.Get the Half Pack
  • 76100%, the whole bankFull pack, US$39Plus the questions-only PDF, monthly updates, refund if you fail.Get the full pack
ABOUT THIS PACK

What’s in the IAPP CIPP/C pack

  • 76 questions mapped to the CIPP/C Body of Knowledge and exam blueprint
  • Answers and explanations for every question, including the wrong options
  • A questions-only PDF for timed practice runs
  • Delivered by email shortly after checkout
  • Free monthly updates for as long as the exam is live
  • Pass or your money back

A CIPP/C attempt costs US$550 (US$375 for a retake). This pack is US$39, paid once.

What makes the CIPP/C hard

CIPP/C is the Canadian concentration of IAPP's privacy professional certification: 90 questions in 150 minutes with an optional 15 minute break, and a pass mark of 300 on the 100 to 500 scale.

The exam is built around the split between federal and provincial, and between private and public sector. The private sector side covers PIPEDA and its ten fair information principles, the substantially similar provincial statutes in Quebec, Alberta and British Columbia, the Digital Privacy Act's breach reporting requirements, CASL, and Quebec's Law 25 obligations around privacy impact assessments, consent, automated decision making and cross border transfers. The public sector side covers the federal Privacy Act and Access to Information Act, the provincial freedom of information statutes, and health privacy laws such as Ontario's PHIPA.

Scenario questions typically describe an organisation, a data flow or a complaint and ask which law and which principle applies, so the fastest gains come from knowing which statute governs each combination of sector, province and data type.

About the exam

CIPP/C is IAPP's Canadian privacy law certification. It covers the Canadian privacy environment, federal and provincial private sector privacy law including PIPEDA, Quebec's Law 25 and the Alberta and BC PIPAs, public sector and health privacy law, anti-spam law, breach notification, and the roles and powers of the privacy commissioners and courts. There are no prerequisites.

Questions before you buy

How quickly do I receive it?

Your PDF is prepared and sent to your email address after checkout, and you get a confirmation as soon as it is on its way.

Are updates included?

Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.

What if I fail the exam?

We refund the pack, or swap it for any other pack if you would rather keep studying. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.

What is your pass rate?

99% of customers who prepare with a CertStash pack pass. If you do not, we refund the pack, or swap it for another pack.

Can I share it with colleagues?

Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.

Related products