Online Access Free DCPP-01 Exam Questions

Which of the following legislations/ guidelines do not cover the concept of trans-border data flow?

• A.OECD
• B.None of the above
• C.IT (Amendment) Act, 2008
• D.PIPEDA

Which of the following statements is true in respect of the India specific government projects such as Aadhaar, National Population Register (NPR), etc. that can have privacy implications?

• A.Collection of biometrics in India is a statutory requirement
• B.Data subjects are not limited in their ability to exercise control over the ways their personal information is being used, once it has been shared by them as part of the projects
• C.Citizens are being given the choice to opt out from submitting their biometric details and are allowed to complete the environment without submitting their biometrics
• D.Proper and adequate notification is not provided to data subjects before and during the collection of their personal information

Which of the following privacy regulation advocates de-identification of personal information?

• A.IT Act of India
• B.Australia's ANPP
• C.EU Data Protection Directive
• D.Canada's PIPEDA

What are the roles an organization can play from privacy perspective?
i. Data Controller - determines the means and purpose of processing of data which is collected from its end customers ii. Data Controller - determines the means and purpose of processing of data which is collected from its employees iii. Data Sub-Processor - processes personal data on behalf of data processor iv. Joint Controller - determines the means and purpose of data processing along with other data controller Please select correct option:

• A.i, ii, iii and iv
• B.i, ii and iii
• C.i, iii and iv
• D.ii, iii and iv

Health insurance firm based in the US uses BPM services provided by an Indian company. It was found that one of the employees of the Indian company exported customer data of the insurance company to another US-based insurance company. Under which of the below ground, the company and its executives in India were also subjected to legal action ?

• A.These actions were not avoided by using data loss prevention tools.
• B.Employees of the company were allowed to view sensitive personal information.
• C.Background checks were not conducted on the individuals.
• D.No reasonable security practices were implemented to protect data.