CIPP-C Exam Guide, Objectives & Preparation

Exam Overview

Exam Code	CIPP-C
Exam Name	Certified Information Privacy Professional/ Canada (CIPP/C)
Vendor	IAPP
Total Questions	150
Last Updated	26-Oct, 2026

Free CIPP-C Questions Get Premium Access

Why CertsPoint?

Latest & Verified Questions
Detailed Explanations
Regular Updates
Full-Length Practice Tests
Boost Your Exam Confidence

PDF Study Materials

Downloadable guides and resources

Practice Tests

Full-length tests with real exam experience

Progress Tracking

Monitor your performance and improvement

Study Anywhere

Access on desktop, tablet, and mobile

Excellent

4.6 (398 Up Votes)

Secure Payment Privacy Protected Money Back Guarantee

Free CIPP-C Practice Questions

Explore 5 free practice questions for the IAPP CIPP-C exam and review the answers and explanations to support your preparation.

Question 1
Single answer

According to the Privacy Act, which of the following disclosures of personal information by a government institution would require the data subject’s consent?
- Option A:
  When disclosing to a law enforcement body.
  Correct
- Option B:
  When disclosing to comply with a search warrant.
  Correct
- Option C:
  When disclosing to a registered charitable organization.
  Correct
- Option D:
  When disclosing to a member of parliament to assist in resolving a problem.
  Correct
Show Answer & Explanation Hide Answer & Explanation

Correct Answer: C
Question 2
Single answer

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), when engaging in a third-party transfer of personal information for processing, an organization is expected to have the technology to protect the information during transit and to?
- Option A:
  Establish a contract outlining the individual outsourcing arrangement.
  Correct
- Option B:
  Obtain additional consent for the use of the information by the third party.
  Correct
- Option C:
  Confirm the jurisdictional protections of the receiving organization are the same as PIPEDA.
  Correct
- Option D:
  Review the cross-border data flow competed and approved by the Treasury Board of Canada Secretariat.
  Correct
Show Answer & Explanation Hide Answer & Explanation

Correct Answer: A
Question 3
Single answer

The Government of Canada’s Directive on Privacy Impact Assessments applies to all of the following EXCEPT?
- Option A:
  The Ministry of Health
  Correct
- Option B:
  The Bank of Canada.
  Correct
- Option C:
  Crown Corporations.
  Correct
- Option D:
  The Cabinet.
  Correct
Show Answer & Explanation Hide Answer & Explanation

Correct Answer: D
Question 4
Single answer

Which falls under the jurisdiction of the Personal Information Protection and Electronic Documents Act (PIPEDA)?
- Option A:
  Personal information collected by private businessesfor journalistic or artistic purposes.
  Correct
- Option B:
  Personal health information (PHI) handled by private enterprises in provinces that have adopted substantially similar legislation.
  Correct
- Option C:
  Personal information disclosed across provincial or national borders by organizationssuch as credit reporting agencies or list marketers.
  Correct
- Option D:
  Personal information such as names, titles and contact information used by businesses to communicate with employees regarding their profession.
  Correct
Show Answer & Explanation Hide Answer & Explanation

Correct Answer: C
Question 5
Single answer

In Ontario, a patient attends an appointment with a physician and reveals information about some new symptoms that she has been experiencing. Based on this information, the physician diagnoses the patient with a condition and prepares the report detailing the applicable history and diagnosis. The report is added to the patient’s record. The patient later regrets revealing certain facts and doesn’t want anyone else to know about these symptoms or the diagnosis. She acknowledges that the information she provided was correct and does not question the diagnosis. Which of the following requests would the patient be mostsuccessful at pursuing?
- Option A:
  That a correction be made to change the diagnosis based on the patient's wishes.
  Correct
- Option B:
  That the information be restricted from disclosure to other health care providers.
  Correct
- Option C:
  That a copy of the record be kept by the patient for disclosure to physicians.
  Correct
- Option D:
  That details of the diagnosis be deleted from the patient’s health record.
  Correct
Show Answer & Explanation Hide Answer & Explanation

Correct Answer: B

Free CIPP-C Practice Questions

Question 1

According to the Privacy Act, which of the following disclosures of personal information by a government institution would require the data subject’s consent?

Question 2

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), when engaging in a third-party transfer of personal information for processing, an organization is expected to have the technology to protect the information during transit and to?

Establish a contract outlining the individual outsourcing arrangement.

Obtain additional consent for the use of the information by the third party.

Confirm the jurisdictional protections of the receiving organization are the same as PIPEDA.

Review the cross-border data flow competed and approved by the Treasury Board of Canada Secretariat.

Question 3

The Government of Canada’s Directive on Privacy Impact Assessments applies to all of the following EXCEPT?

The Ministry of Health

The Bank of Canada.

Crown Corporations.

The Cabinet.

Question 4

Which falls under the jurisdiction of the Personal Information Protection and Electronic Documents Act (PIPEDA)?

Personal information collected by private businessesfor journalistic or artistic purposes.

Personal health information (PHI) handled by private enterprises in provinces that have adopted substantially similar legislation.

Personal information disclosed across provincial or national borders by organizationssuch as credit reporting agencies or list marketers.

Personal information such as names, titles and contact information used by businesses to communicate with employees regarding their profession.

Question 5

That a correction be made to change the diagnosis based on the patient's wishes.

That the information be restricted from disclosure to other health care providers.

That a copy of the record be kept by the patient for disclosure to physicians.

That details of the diagnosis be deleted from the patient’s health record.