Q: 8
What is required of a private sector organization that is subject to a finding by a Canadian federal or
Options
Discussion
Not C, it's A. Only Quebec's authority issues binding decisions for private sector orgs, none of the others do.
A is right, not B. Quebec's privacy authority actually issues binding decisions for private sector orgs, so they have to comply-it's not just a suggestion like with the federal Privacy Commissioner. Pretty sure that's unique to Quebec under their law. If anyone disagrees let me know, but that's how I've always understood it.
A is right here. In Québec, the privacy authority's findings are binding, which stands out compared to other provinces where they're more like recommendations. Rest of Canada doesn't treat these as enforceable decisions by default. Pretty sure that's what the question's testing!
C or A here. I remember Quebec's privacy authority makes binding findings, so A fits if that's what they mean, but the wording is a bit tricky. Can't see C applying across all provinces. Anyone pick C for another reason?
A
Anyone using the official guide or CIPP-C practice set for this scenario? Trying to confirm jurisdiction details around Quebec findings.
I don't think C is right here. A makes sense since in Quebec, findings are binding for private orgs.
C isn't right, it's A for Quebec. Only Quebec’s privacy regulator can issue findings that are legally binding and must be followed. Other provinces, including federal, mostly issue recommendations instead of binding orders. Saw a similar question in practice exams, pretty sure this is what they're getting at. Feel free to clarify if you think another province works differently.
B , since the Privacy Commissioner of Canada handles most federal findings I thought their decisions were the key ones to follow.
A, exam reports and the official IAPP guide both say Que9bec treats findings as binding unlike elsewhere in Canada.
Be respectful. No spam.