Under the Personal Information Protection and Electronic Documents Act (PIPEDA), an organization must maintain a record of every breach of security safeguards involving personal information for a minimum of?
Suggested Answer: A
Get Premium CIPP/C Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
29 comments · newest first
TI
Tiara
10 months ago
Nope, definitely 24 months. Surprised you thought otherwise!
AL
Alease
11 months ago
I thought it was longer, like 36 months?
TE
Telma
11 months ago
Totally agree, 24 months makes sense for tracking.
EM
Emily
11 months ago
Wait, is it really that long? I thought it was shorter!
MY
Myra
11 months ago
It's 24 months for breach records under PIPEDA.
RO
Ronny
12 months ago
I thought it was 12 months too, but I might be mixing it up with another regulation.
EU
Eugene
12 months ago
I’m torn between 12 months and 36 months. I know it’s definitely not 3 months, but I can’t recall the exact number.
SH
Sharen
1 year ago
I remember practicing a question about PIPEDA, and I feel like it was 24 months. That sounds familiar.
MI
Mickie
1 year ago
I think the record retention period is 12 months, but I’m not entirely sure. It could be longer.
ST
Stephane
1 year ago
Ugh, I hate questions about specific legal requirements. I'll just take my best guess and move on to the next one.
WY
Wynell
1 year ago
Okay, I've got this. PIPEDA mandates a minimum retention period for breach records, and the options are giving me the possible timeframes. I'll eliminate the ones that don't sound right.
TR
Tricia
1 year ago
Hmm, I'm a bit unsure about this one. I'll need to review my notes on PIPEDA to make sure I understand the breach reporting requirements.
RE
Rebecka
1 year ago
This seems like a straightforward question about PIPEDA requirements. I'll focus on carefully reading the options and selecting the correct answer.
EV
Eveline
2 years ago
3 months? Are you kidding me? That's way too short for a data breach record. Gotta be 24 months, no doubt about it.
DI
Dino
1 year ago
Yeah, 24 months seems like a more appropriate timeframe to keep a record of data breaches.
MO
Mozell
1 year ago
I agree, 3 months is definitely too short. 24 months sounds more reasonable.
NE
Nenita
2 years ago
Hmm, I thought it was 12 months. But 24 months makes sense, better to be safe than sorry with personal data breaches.
BR
Brock
2 years ago
I'm not sure, but I think it makes sense to keep records for at least a year to ensure compliance with PIPEDA.
LE
Lenita
2 years ago
Well, this seems straightforward. 24 months is the required retention period, right?
AL
Alysa
1 year ago
Definitely. It's all about protecting people's privacy and data.
MA
Marta
1 year ago
I agree. It helps ensure accountability and transparency in handling personal information.
MO
Monte
1 year ago
That's good to know. It's important to keep track of security breaches for that long.
KE
Keena
1 year ago
Yes, you are correct. The organization must maintain a record of every breach for 24 months.
JU
Julieta
1 year ago
Definitely, it's a crucial part of complying with PIPEDA regulations.
KA
Katheryn
1 year ago
I agree, it helps with accountability and transparency in handling sensitive data.
FR
Francesco
1 year ago
It's important to keep track of these breaches to ensure the protection of personal information.
EN
Enola
1 year ago
Yes, that's correct. The organization must maintain a record of every breach for 24 months.
TR
Tracey
2 years ago
I agree with Genevive, because it allows organizations to track and analyze breaches over a longer period of time.
GE
Genevive
2 years ago
I think the answer is B) 12 months.