The Privacy Commissioner has authority under which federal legislation governing how the federal government and its agencies handle personal information?

• A. Personal Information Protection and Electronic Documents Act
• B. Access to Information Act
• C. Privacy Act
• D. Privacy Regulations

Answer: (C)

This item tests which federal statute gives the Privacy Commissioner authority over how the federal government and its agencies handle personal information. The correct statute is the Privacy Act. It sets out how federal government institutions may collect, use, disclose, retain, and protect personal information, and it designates the Privacy Commissioner to oversee compliance, investigate complaints, and recommend remedies when privacy rights are violated.

PIPEDA governs private-sector organizations, not federal institutions. The Access to Information Act deals with granting public access to government records rather than privacy protections, and its oversight comes from the Information Commissioner. Privacy Regulations exist as implementing rules under the Privacy Act, but the overarching authority comes from the Privacy Act itself.