This certification validates professional skills in governance, risk, and compliance, including controls, risk evaluation, compliance, and continual improvement. It is intended for practitioners who help organizations operate responsibly and protect business value.
In Ontario, a patient attends an appointment with a physician and reveals information about some new symptoms that she has been experiencing. Based on this information, the physician diagnoses the patient with a condition and prepares the report detailing the applicable history and diagnosis. The report is added to the patient’s record. The patient later regrets revealing certain facts and doesn’t want anyone else to know about these symptoms or the diagnosis. She acknowledges that the information she provided was correct and does not question the diagnosis.
Which of the following requests would the patient be most successful at pursuing?
The Government of Canada’s Directive on Privacy Impact Assessments applies to all of the following EXCEPT?
Which falls under the jurisdiction of the Personal Information Protection and Electronic Documents Act (PIPEDA)?
Under the Personal Information Protection and Electronic Documents Act (PIPEDA), when engaging in a third-party transfer of personal information for processing, an organization is expected to have the technology to protect the information during transit and to?
According to the Privacy Act, which of the following disclosures of personal information by a government institution would require the data subject’s consent?