Câu 17: CIPP-C: Certified Information Privacy Professional/Canada (CIPP/C)

What is required through the "circle of care" concept under Canadian health information privacy law?

1. A. Health information custodians or trustees be specified only by applicable law or regulation
2. B. An individual’s consent may be implied unless the individual has refused consent or if the purpose of the disclosure is not to provide health care.
3. C. Notification to the individual be made in the event of a data breach of personal health information (PHI) by an organization that is based in Canada
4. D. Consent must be expressed or implied when a custodian discloses personal health information (PHI) to another custodian for the purpose of providing health care. — đáp án hiện tại