Câu 11: CIPP-C: Certified Information Privacy Professional/Canada (CIPP/C)

A federally regulated company based in Ontario has customers in Ontario, Quebec, New Brunswick, Alberta and British Columbia. Unfortunately, a third-party vendor that provides marketing support to the company experiences a privacy breach which impacts the personal information of all its customers across the provinces where it operates. The Privacy Officer determines that the breach causes a real risk of significant harm to their customers and is tasked with reporting the breach to the relevant regulators. With which provincial privacy regulators does the company have to file a report?

1. A. It is unnecessary to file a report with any provinces because the company is federally regulated — đáp án hiện tại
2. B. All of the provinces where its customers are located
3. C. New Brunswick and British Columbia only
4. D. Québec and Alberta only