IAPP CIPP/C Exam - Topic 4 Question 61 Discussion

Actual exam question for IAPP's CIPP/C exam

Question #: 61
Topic #: 4

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), an organization must maintain a record of every breach of security safeguards involving personal information for a minimum of?

A3 months.

B12 months.

C24 months.

D36 months

Show Suggested Answer

Suggested Answer: A

by Kami at Mar 22, 2025, 11:23 AM

Limited Time Offer

25%

Off

Get Premium CIPP/C Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tiara

9 months ago

Nope, definitely 24 months. Surprised you thought otherwise!

upvoted 0 times

...

Alease

9 months ago

I thought it was longer, like 36 months?

upvoted 0 times

...

Telma

9 months ago

Totally agree, 24 months makes sense for tracking.

upvoted 0 times

...

Emily

10 months ago

Wait, is it really that long? I thought it was shorter!

upvoted 0 times

...

Myra

10 months ago

It's 24 months for breach records under PIPEDA.

upvoted 0 times

...

Ronny

10 months ago

I thought it was 12 months too, but I might be mixing it up with another regulation.

upvoted 0 times

...

Eugene

10 months ago

I’m torn between 12 months and 36 months. I know it’s definitely not 3 months, but I can’t recall the exact number.

upvoted 0 times

...

Sharen

11 months ago

I remember practicing a question about PIPEDA, and I feel like it was 24 months. That sounds familiar.

upvoted 0 times

...

Mickie

11 months ago

I think the record retention period is 12 months, but I’m not entirely sure. It could be longer.

upvoted 0 times

...

Stephane

11 months ago

Ugh, I hate questions about specific legal requirements. I'll just take my best guess and move on to the next one.

upvoted 0 times

...

Wynell

11 months ago

Okay, I've got this. PIPEDA mandates a minimum retention period for breach records, and the options are giving me the possible timeframes. I'll eliminate the ones that don't sound right.

upvoted 0 times

...

Tricia

11 months ago

Hmm, I'm a bit unsure about this one. I'll need to review my notes on PIPEDA to make sure I understand the breach reporting requirements.

upvoted 0 times

...

Rebecka

11 months ago

This seems like a straightforward question about PIPEDA requirements. I'll focus on carefully reading the options and selecting the correct answer.

upvoted 0 times

...

Eveline

1 year ago

3 months? Are you kidding me? That's way too short for a data breach record. Gotta be 24 months, no doubt about it.

upvoted 0 times

Dino

1 year ago

Yeah, 24 months seems like a more appropriate timeframe to keep a record of data breaches.

upvoted 0 times

...

Mozell

1 year ago

I agree, 3 months is definitely too short. 24 months sounds more reasonable.

upvoted 0 times

...

Nenita

1 year ago

Hmm, I thought it was 12 months. But 24 months makes sense, better to be safe than sorry with personal data breaches.

upvoted 0 times

...

Brock

1 year ago

I'm not sure, but I think it makes sense to keep records for at least a year to ensure compliance with PIPEDA.

upvoted 0 times

...

Lenita

1 year ago

Well, this seems straightforward. 24 months is the required retention period, right?

upvoted 0 times

Alysa

1 year ago

Definitely. It's all about protecting people's privacy and data.

upvoted 0 times

...

Marta

1 year ago

I agree. It helps ensure accountability and transparency in handling personal information.

upvoted 0 times

...

Monte

1 year ago

That's good to know. It's important to keep track of security breaches for that long.

upvoted 0 times

...

Keena

1 year ago

Yes, you are correct. The organization must maintain a record of every breach for 24 months.

upvoted 0 times

...

Julieta

1 year ago

Definitely, it's a crucial part of complying with PIPEDA regulations.

upvoted 0 times

...

Katheryn

1 year ago

I agree, it helps with accountability and transparency in handling sensitive data.

upvoted 0 times

...

Francesco

1 year ago

It's important to keep track of these breaches to ensure the protection of personal information.

upvoted 0 times

...

Enola

1 year ago

Yes, that's correct. The organization must maintain a record of every breach for 24 months.

upvoted 0 times

...

Tracey

1 year ago

I agree with Genevive, because it allows organizations to track and analyze breaches over a longer period of time.

upvoted 0 times

...

Genevive

1 year ago

I think the answer is B) 12 months.

upvoted 0 times

...