IAPP Exam CIPP-C Topic 1 Question 54 Discussion

Actual exam question for IAPP's CIPP-C exam

Question #: 54
Topic #: 1

What is required through the "circle of care" concept under Canadian health information privacy law?

AHealth information custodians or trustees be specified only by applicable law or regulation

BAn individual's consent may be implied unless the individual has refused consent or if the purpose of the disclosure is not to provide health care.

CNotification to the individual be made in the event of a data breach of personal health information (PHI) by an organization that is based in Canada

DConsent must be expressed or implied when a custodian discloses personal health information (PHI) to another custodian for the purpose of providing health care.

Show Suggested Answer

Suggested Answer: D

by Paola at Oct 23, 2024, 12:39 AM

Limited Time Offer

25%

Off

Get Premium CIPP-C Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shakira

Hmm, I'm not sure about this one. Maybe C? Notifying individuals about data breaches seems like it could be part of the 'circle of care', right? Though I might be reaching here.

upvoted 0 times

...

Catalina

11 days ago

I agree with Vivienne, consent is important to protect privacy and ensure trust in the healthcare system.

upvoted 0 times

...

Vivienne

13 days ago

I think the answer is D, because consent is necessary for sharing personal health information.

upvoted 0 times

...

Felix

18 days ago

Wait, is this a trick question? I'm going to go with B. Implied consent unless the individual refuses - that sounds like the 'circle of care' concept to me.

upvoted 0 times

...

Shannon

21 days ago

I think the answer is D. The 'circle of care' concept requires expressed or implied consent when disclosing PHI for providing healthcare. The other options don't sound right to me.

upvoted 0 times

...