DCPP-01 Practice Test Questions Updated 124 Questions [Q59-Q77]

NEW QUESTION 59
General Data Protection Regulation, 2016 applies to processing of personal data of natural persons that are:

NEW QUESTION 60
A company collects personal information about its employees and requests them to provide accurate information in order to avail benefits such as life insurance and medical insurance. Employees of the company have raised concerns about use of their personal information. Due to the concerns, the company has decided to create a privacy policy.
What all should the company include in its privacy policy to address the raised concerns?

NEW QUESTION 61
Which among the following organizations does not issue a privacy seal?

NEW QUESTION 62
After the rules were notified under section 43A of the IT (Amendment) Act, 2008, a clarification was issued by the government which exempted the service providers, which get access to/processes Sensitive Personal Data or information (SPDI) under contractual agreement with a legal entity located within or outside Indi a. Which privacy principle provisions notified under Sec 43A were exempted for the service providers?

NEW QUESTION 63
Which of the following statements are true about the privacy statement of an organization?

NEW QUESTION 64
Provisions in which of the following legislations in India have or could have a direct conflict with an individual’s privacy (though exceptions could have already been defined in the law)?

NEW QUESTION 65
Which of the following best describes the practice of delivering specifically targeted advertisements to users, based on their online activities?

NEW QUESTION 66
Which of the following provides the legal basis for an Adjudicating Officer in every Indian state & union territory, with the powers of a civil court, to hear complaints and order compensation to the affected individuals?

NEW QUESTION 67
Which of the following statements are true about the privacy statement of an organization?

NEW QUESTION 68
For negligence in implementing and maintaining the reasonable security practices and procedures for
protecting Sensitive Personal Data or Information (SPDI) as mentioned in Section 43A and associated rules
under IT (Amendment) Act, 2008, a corporate entity may be liable to pay compensation of up to___________

NEW QUESTION 69
Indian constitution does not expressly provide for the “right to privacy” to its citizens. However, there were various judicial pronouncements of the apex court which finally established the “right to privacy” as a fundamental right subsumed under Article 21 of the constitution of Indi a. Article 21 inter alia provides and protects the __________________.

NEW QUESTION 70
Which of the following is not required by an organization in US, resorting to EU-US Safe Harbor provisions, to transfer personal information from EU member nation to US?

NEW QUESTION 71
BS 10012 is a British standard used to establish ___________.

NEW QUESTION 72
Which of the following privacy principle deals with informed consent of the data subject before sharing the personal information (of the data subject) to third parties for processing?

NEW QUESTION 73
What are the roles an organization can play from privacy perspective?
i. Data Controller – determines the means and purpose of processing of data which is collected from its end
customers
ii. Data Controller – determines the means and purpose of processing of data which is collected from its
employees
iii. Data Sub-Processor – processes personal data on behalf of data processor
iv. Joint Controller – determines the means and purpose of data processing along with other data controller
Please select correct option:

NEW QUESTION 74
What does PHI stand for, as per HIPAA/ HITECH?

NEW QUESTION 75
Which one of the following is considered as the first step of evolution in the formation of today’s concept of
privacy?

NEW QUESTION 76
After the rules were notified under section 43A of the IT (Amendment) Act, 2008, a clarification was issued by the government which exempted the service providers, which get access to/processes Sensitive Personal Data or information (SPDI) under contractual agreement with a legal entity located within or outside India. Which privacy principle provisions notified under Sec 43A were exempted for the service providers?

NEW QUESTION 77
‘Challenging Compliance’ as a privacy principle is covered in which of the following data protection/ privacy act?