Latest Exam Prep

NEW QUESTION 17
For negligence in implementing and maintaining the reasonable security practices and procedures for
protecting Sensitive Personal Data or Information (SPDI) as mentioned in Section 43A and associated rules
under IT (Amendment) Act, 2008, a corporate entity may be liable to pay compensation of up to___________

NEW QUESTION 18
In relation to “Online Privacy” please pick the incorrect statement:

NEW QUESTION 19
According to IT (Amendment) Act,2008, who should designate a grievance officer to redress grievance(s) of provider of information?

NEW QUESTION 20
Which of the following statement about Personally Identifiable Information (PII) is true?

NEW QUESTION 21
Regarding projects such as Aadhaar, the National Population Register (NPR), etc. that involve national government projects specific to India, which of the following statements is accurate?

NEW QUESTION 22
A financial organization may share nonpublic information about its customers in accordance with Gramm-Leach-Bliley Act of the US. Which one of the following is the requirement?

NEW QUESTION 23
Among the following options, which would be the most appropriate for the transfer of Personal and Sensitive data from an EU company to another organization outside the EU?

NEW QUESTION 24
You are part of a team that has been created by Indian government to create India’s privacy law based on recommendations in Justice AP Shah’s Report. Which of the following provisions should be addressed in the law?

NEW QUESTION 25
Which among the following can be classified as the most important purpose for enactment of data protection/ privacy regulations across the globe?

NEW QUESTION 26
As a newly-appointed privacy officer of an IT company gearing up for DSCI’s privacy certification, you are trying to understand what data elements are involved in each of the business process, function and if these data elements can be classified as sensitive personal information.
What is being accomplished with this effort?

NEW QUESTION 27
Rashmi recently started working as a customer care representative for a bank. After receiving a customer complaint over the phone, she wrote an email to send to grievance department in the bank. The email included customer’s full name, bank account number, residential address, email address and contact number. She picked 2-3 resources/employees from the intranet site of the bank, which belonged to the grievance department and sent the email.
Please select the most ideal scenario from a privacy point of view?

NEW QUESTION 28
In India, who among the following would be the authorized legal entities to monitor and intercept communication of individuals?

NEW QUESTION 29
Choose from the options below to group privacy principles into user centric (requiring people’s involvement) and organization centric (restricted to processes within the organization) categories:

NEW QUESTION 30
Which among the following organizations

NEW QUESTION 31
A multinational company with operations in several parts within EU and outside EU, involves international data transfer of both its employees and customers. In some of its EU branches, which are relatively larger in size, the organization has a works council. Most of the data transferred is personal, and some of the data that the organization collects is sensitive in nature, the processing of some of which is also outsourced to its branches in Asian countries.
For the outsourced work of its customers’ data processing, in order to initiate data transfer to another organizations outside EU, which is the most appropriate among the following?

NEW QUESTION 32
Which of the following could be considered as the most beneficial aspect of implementing Privacy Enhancing Technologies or Tools (PETs)?

NEW QUESTION 33
Which of the following aspects of personal information lifecycle management should the privacy function in an organization be concerned with i. Policy definition ii. Policy enforcement iii. IT infrastructure setup iv. Physical infrastructure setup Please select the correct option:

NEW QUESTION 34
What are the roles an organization can play from privacy perspective?
i. Data Controller – determines the means and purpose of processing of data which is collected from its
end customers
ii. Data Controller – determines the means and purpose of processing of data which is collected from its
employees
iii. Data Sub-Processor – processes personal data on behalf of data processor
iv. Joint Controller – determines the means and purpose of data processing along with other data
controller
Please select correct option:

NEW QUESTION 35
Which of the following laid foundation for the development of OECD privacy principles for the promotion of free international trade and trans border data flows?

NEW QUESTION 36
‘Challenging Compliance’ as a privacy principle is covered in which of the following data protection/ privacy
act?

NEW QUESTION 37
Effective 2013, HIPAA Omnibus rule applies to which of the following?

NEW QUESTION 38
Which of the following parameters should ideally be addressed by a privacy program of an organization?

NEW QUESTION 39
Regulations that apply to the processing of personal data of natural persons that fall under the following categories:

NEW QUESTION 40
Companies based in EU and willing to transfer data outside the EU/EEA, use model contracts as an instrument. Which of the following statements are true in reference to above statement?

NEW QUESTION 41
‘Challenging Compliance’ as a privacy principle is covered in which of the following data protection/ privacy act?