Free DCPP-01 Exam Dumps Preview

Rashmi recently started working as a customer care representative for a bank. After receiving a customer complaint over the phone, she wrote an email to send to grievance department in the bank. The email included customer's full name, bank account number, residential address, email address and contact number. She picked 2-3 resources/employees from the intranet site of the bank, which belonged to the grievance department and sent the email.

Please select the most ideal scenario from a privacy point of view?

The primary concern from privacy governance perspective for a leading bank is that the personnel working in non-production environment are not always security cleared to operate with the customers' Personal Identifiable Information (PII) used in the production environment. This practice represents a security vulnerability where data can be copied by unauthorized personnel and security measures associated with standard production level controls can be easily bypassed.

What technology solutions can be implemented by the organization to overcome this situation:

When an individual has choice to decide on who else can have access to their personal information, it is called

Which among the following would not be characteristic of a good privacy notice?

In the history of human evolution, erection of walls and fences around one's living spaces is interpreted as arrival of which type of privacy consciousness?

Complete the sentence:
The Gramm-Leach-Bliley Act (GLBA) of US regulates the privacy practices adopted by financial institutions, requiring them to provide adequate security of the customer records. It lays various obligations on the financial institutions but allows such financial institutions to share the non-public information of customers (after properly notifying their consumers in a manner mentioned in the Act) with

Company A collects and stores information from people X & Y on behalf of company B.

Which of the following statements are true?

The Information Technology (Reasonable Security Practices And Procedures and Sensitive Data or Information) Rules, 2011, provide the consumer with which of the following rights?

What is not a best practice for maintaining privacy while sharing any personal information on social networking?

Which one of the following is considered as the first step of evolution in the formation of today's concept of privacy?

Anonymity networks and platforms for Privacy Preferences Project (P3P) are generally _________.

A government agency collecting biometrics of citizens can deny sharing such information with Law Enforcement Agencies (LEAs) on which of the following basis?

From the following list, identify the technology aspects that are specially designed for upholding the privacy:

i. Data minimization
ii. Intrusion prevention system
iii. Data scrambling
iv. Data loss prevention
v. Data portability
vi. Data obfuscation
vii. Data encryption
viii. Data mirroring

Please select the correct set of aspects from below options:

In India, who among the following would be the authorized legal entities to monitor and intercept communication of individuals?

Data Protection officer is reviewing the organization's existing privacy policy. Which of the following would be the most critical factor for the review process?

i. Policy definition
ii. Policy enforcement
iii. IT infrastructure setup
iv. Physical infrastructure setup

Which of the following aspects of personal information lifecycle management should the privacy function in an organization be concerned with

i. Policy definition
ii. Policy enforcement
iii. IT infrastructure setup
iv. Physical infrastructure setup

Please select the correct option:

A newly appointed Data Protection officer is reviewing the organization's existing privacy policy.

Which of the following would be the most critical factor for the review process?

_______________ calls for inclusion of data protection from the onset of the designing of systems.

Which of the following best defines a `Data Subject'?

Which of the following could be considered as triggers for updating privacy policy?

What are the roles an organization can play from privacy perspective?

i. Data Controller - determines the means and purpose of processing of data which is collected from its end customers ii. Data Controller - determines the means and purpose of processing of data which is collected from its employees iii. Data Sub-Processor - processes personal data on behalf of data processor iv. Joint Controller - determines the means and purpose of data processing along with other data controller

Please select correct option:

In the context of DSCI Privacy Framework (DPF?
, what does PPP stand for?

For negligence in implementing and maintaining the reasonable security practices and procedures for protecting Sensitive Personal Data or Information (SPDI) as mentioned in Section 43A and associated rules under IT (Amendment) Act, 2008, a corporate entity may be liable to pay compensation of up to___________

As per Article 33 of GDPR, in case of a personal data breach, the data controller has to inform the supervisory authority within ___________ of becoming aware of the breach.

What does PHI stand for, as per HIPAA/ HITECH?