Practice Questions C2-001–C2-014
Do not open the Answer Key until you have committed to an answer.
C2-001 — Introduction · Foundational · Recall
Which statement best captures Chapter 2's scope of Data Handling Ethics? - A. Handling data throughout procurement, storage, management, interpretation/application, and disposal in ways aligned with ethical principles and their effects on people and organizations. - B. Applying privacy law only to personally identifiable data at the point of collection. - C. Securing databases from unauthorized access while leaving interpretation and presentation to business users. - D. Using data only when a formal Data Governance council has approved every transaction.
C2-002 — Introduction · Foundational · Understand
Which set contains the three core concerns Chapter 2 says the ethics of data handling center on? - A. Availability, performance, and cost - B. Impact on people, potential for misuse, and economic value/ownership of data - C. Confidentiality, integrity, and availability - D. Collection, storage, and deletion only
C2-003 — Introduction · Standard · Apply
A hospital protects a patient dataset from unauthorized access, but known errors regularly lead to inappropriate care recommendations. Which response is strongest? - A. Not ethical because the data is secure. - B. Application-development problem only. - C. Data Quality is also an ethical responsibility because unreliable data can harm people affected by decisions. - D. Warning clinicians about possible errors satisfies the ethical duty.
C2-004 — Business Drivers · Standard · Best action
An organization wants to make “ethical data” a competitive advantage. Which action most closely matches Chapter 2? - A. Publish a marketing statement. - B. Move all data to one platform. - C. Delegate ethics entirely to the Chief Privacy Officer. - D. Build governance and controls supporting trustworthy outcomes, reduced misuse risk, stakeholder trust and human dignity.
C2-005 — Ethical Principles · Foundational · Distinguish
A highly personal secondary use gives individuals no meaningful choice and particularly affects people with diminished autonomy. Which principle is most direct? - A. Respect for Persons - B. Beneficence - C. Justice - D. Accountability
C2-006 — Ethical Principles · Foundational · Distinguish
The same business goal can be reached using either highly invasive data or a less invasive alternative with nearly the same benefit. Which principle most directly supports the less risky approach? - A. Justice - B. Beneficence - C. Respect for Law and Public Interest - D. Purpose Limitation
C2-007 — Ethical Principles · Standard · Apply
A predictive system is accurate overall but has a much higher error rate for one historically disadvantaged group under similar circumstances. Which principle is most direct? - A. Respect for Persons - B. Beneficence - C. Justice - D. Storage Limitation
C2-008 — Ethical Principles · Standard · Recall
What fourth principle does Menlo add when adapting Belmont to ICT research? - A. Data Minimization - B. Transparency by Default - C. Right to Erasure - D. Respect for Law and Public Interest
C2-009 — Ethical Principles · Standard · Understand
Which is one of the four EDPS pillars described in Chapter 2? - A. Empowered individuals - B. Mandatory data localization - C. Unlimited secondary use with consent - D. Centralized ownership of all personal data
C2-010 — Ethical Principles · Standard · Best action
A material customer-impact analytics proposal asks who should determine who may use which data and whether processing is appropriate/necessary. Best fit? - A. Data Storage and Operations - B. Data Governance - C. Data Warehousing - D. Reference Data Management
C2-011 — Privacy Principles · Standard · Distinguish
Personal data collected for account servicing is quietly reused for unrelated high-impact scoring. Which recurring privacy principle is most directly violated? - A. Accuracy - B. Security Safeguards - C. Specified purpose / purpose limitation - D. Portability
C2-012 — Privacy Principles · Standard · Apply
A service needs age range and postal region but proposes full birth date, precise location history, religion and unrelated family details “just in case.” Which GDPR principle is most direct? - A. Storage Limitation - B. Integrity and Confidentiality - C. Accuracy - D. Data Minimization
C2-013 — Privacy Principles · Foundational · Recall
When processing is based on consent, which description matches Chapter 2? - A. Consent should be an affirmative action that is freely given, specific, informed and unambiguous. - B. Consent may be inferred from silence whenever a notice is posted. - C. Consent permanently waives later data-subject rights. - D. Consent is required for every form of processing without exception.
C2-014 — Privacy Principles · Standard · Distinguish
Under the PIPEDA principles summarized in Chapter 2, what does Accountability most directly require? - A. Personal data must always remain inside Canada. - B. The organization is responsible for personal information under its control and must designate an accountable individual. - C. Every consumer request needs court approval. - D. All personal information must be deleted immediately after collection.