Certified Information Privacy Professional – Canada (CIPP/C) — Question 19

Under PIPEDA, each of the following situations requires an organization to obtain express consent to use personal information EXCEPT?

Answer options

• A. If the use is outside of the reasonable expectations of an individual.
• B. If the information is publicly available as defined by the regulation.
• C. If the use is inconsistent with the original purpose.
• D. If there is no risk of significant harm.

Correct answer: B

Explanation

The correct answer is B because publicly available information does not require express consent under PIPEDA. Options A, C, and D all involve situations where consent is needed due to the potential risks or changes in the use of personal information.