Certified Information Privacy Professional – Canada (CIPP/C) — Question 14

What must a federal government department do before it implements an electronic service (e-service)?

Answer options

• A. Conduct a preliminary PIA before acquiring the service
• B. Complete a PIA in accordance with Treasury Board guidelines.
• C. Publish a privacy statement in newspapers and on the government website.
• D. Determine if the Office of the Privacy Commissioner must be notified of the launch of this new e-service

Correct answer: B

Explanation

The correct answer, B, is accurate because it emphasizes the requirement to complete a PIA in line with Treasury Board guidelines, which is essential for compliance. Option A is incorrect as it suggests a preliminary PIA is sufficient, while options C and D refer to actions that may be relevant but are not mandatory steps before implementation.