Certified Information Privacy Professional – Canada (CIPP/C) — Question 20

What is required for a provincial law to be considered substantially similar to the Personal Information Protection and Electronic Documents Act (PIPEDA)?

Answer options

• A. Consistency with at least eight of the ten privacy principles, an independent oversight body and a complaint handling mechanism.
• B. Consistency with the ten privacy principles, an independent oversight body and a process for accessing information.
• C. Consistency with the ten privacy principles, an independent oversight body and a redress mechanism.
• D. Consistency with the ten privacy principles, an appeal process and a redress mechanism.

Correct answer: C

Explanation

The correct answer is C because for a provincial law to be considered substantially similar to PIPEDA, it must align with all ten privacy principles, have an independent oversight body, and include a redress mechanism for individuals. Options A and B do not satisfy the requirement of a redress mechanism, while option D includes an appeals process instead of a redress mechanism, making them all incorrect.