IAPP Exam CIPP-C Topic 1 Question 54 Discussion

Actual exam question for IAPP's CIPP-C exam

Question #: 54
Topic #: 1

What is required through the "circle of care" concept under Canadian health information privacy law?

AHealth information custodians or trustees be specified only by applicable law or regulation

BAn individual's consent may be implied unless the individual has refused consent or if the purpose of the disclosure is not to provide health care.

CNotification to the individual be made in the event of a data breach of personal health information (PHI) by an organization that is based in Canada

DConsent must be expressed or implied when a custodian discloses personal health information (PHI) to another custodian for the purpose of providing health care.

Show Suggested Answer

Suggested Answer: D

by Paola at Oct 23, 2024, 12:39 AM

Limited Time Offer

25%

Off

Get Premium CIPP-C Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Willow

20 days ago

Ugh, these privacy law questions are the worst. I'm just going to close my eyes and pick an answer... Ah, screw it, I'll go with D. Sounds the most 'circle of care'-ish to me.

upvoted 0 times

Nidia

20 hours ago

I think D is the right choice too. It's all about consent.

upvoted 0 times

...

Elouise

26 days ago

D, definitely. Consent is key in the 'circle of care' - can't just be sharing PHI willy-nilly. Although, if I had a dollar for every time I heard 'circle of care' in this exam, I'd be a rich man!

upvoted 0 times

Antonio

4 days ago

I think so too, it's important to respect patients' privacy.

upvoted 0 times

...

Lavonda

7 days ago

I agree, consent is crucial in the 'circle of care'.

upvoted 0 times

...

Shakira

1 months ago

Hmm, I'm not sure about this one. Maybe C? Notifying individuals about data breaches seems like it could be part of the 'circle of care', right? Though I might be reaching here.

upvoted 0 times

Lashawna

6 days ago

B) An individual's consent may be implied unless the individual has refused consent or if the purpose of the disclosure is not to provide health care.

upvoted 0 times

...

Afton

16 days ago

A) Health information custodians or trustees be specified only by applicable law or regulation

upvoted 0 times

...

Catalina

1 months ago

I agree with Vivienne, consent is important to protect privacy and ensure trust in the healthcare system.

upvoted 0 times

...

Vivienne

2 months ago

I think the answer is D, because consent is necessary for sharing personal health information.

upvoted 0 times

...

Felix

2 months ago

Wait, is this a trick question? I'm going to go with B. Implied consent unless the individual refuses - that sounds like the 'circle of care' concept to me.

upvoted 0 times

...

Shannon

2 months ago

I think the answer is D. The 'circle of care' concept requires expressed or implied consent when disclosing PHI for providing healthcare. The other options don't sound right to me.

upvoted 0 times