Online Access Free DCPP-01 Exam Questions

What is not a compulsory pre-requisite before a company with headquarters in the EU transfers sensitive personal data to its Asian subsidiaries?

• A.Data subjects are notified
• B.Performing a risk assessment for the processing involved
• C.Self-certifying to Safe Harbor practices and reporting to Federal Trade Commission
• D.Assessing the country's adequacy

With reference to APEC privacy framework, when personal information is to be transferred to another person or organization, whether domestically or internationally, "the ______________ should obtain the consent of the individual and exercise due diligence and take reasonable steps to ensure that the recipient person or organization will protect the information consistently with APEC information privacy principles".

• A.Personal Information Controller
• B.Personal Information Auditor
• C.Personal Information Owner
• D.Personal Information Processor

XYZ is a successful startup that acquired a respectable size & scale of operations in last 3 years, handling business process services for small & medium scale enterprises, largely in US & Europe. They are at the stage of closing a deal with a new banking client and working out the details of privacy related obligations in contract. Ensuring effective enforcement of which of the below listed privacy principles is client's accountability, even after outsourcing its loan approval process to XYZ?
1. Notice
2. Choice and Consent
3. Collection Limitation
4. Use Limitation
5. Access and Correction
6. Security
7. Disclosure to third Party
Please select the correct set of principles from below listed options:

• A.All of the above listed privacy principles
• B.All except 3
• C.None of the above, since they are outsourcing the work to XYZ who will carry the liability going forward
• D.All except V and 6

Which of the following statement about Personally Identifiable Information (PII) is true?

• A.PII is any information about a legal entity including details of its registration or any information that may allow its easy identification
• B.None of the above
• C.PII is necessarily a single data element, not a combination of data elements, which can uniquely identify an individual
• D.PII is a subset of Sensitive Personal Information

One of the main objectives of 'Do Not Track' technology is to

• A.None of the above
• B.Opt out from call back services by e-commerce companies
• C.Opt out from monitoring and surveillance programs of governments, intelligence and Law Enforcement Agencies
• D.Opt out from the web based analytics services, advertising networks and social platforms