DSCI DCPP-01 Online Practice Questions and Exam Preparation

DSCI DCPP-01 Online Questions & Answers

• Question 1:

  What does PHI stand for, as per HIPAA/ HITECH?

  A. Personal healthcare information
  B. Public health information
  C. Protected health information
  D. Personal health information
  C. Protected health information

• Question 2:

  With respect to `Data Minimization' privacy principle, please select the correct statements from the following:

  A. Right to object by the data subject for minimizing the collection of personal information
  B. Data controllers should limit the amount of data collected to what is directly relevant and necessary to accomplish a specified purpose
  C. Data controllers should retain the data only for as long as is necessary to fulfil the purpose for which it was collected
  D. Process of analyzing and minimizing the collected data into useful information
  A. Right to object by the data subject for minimizing the collection of personal information

• Question 3:

  As a newly-appointed Data Protection officer of an IT company gearing up for DSCI's privacy certification, you are trying to understand what data elements are involved in each of the business process, function and if these data elements can be classified as sensitive personal information.

  What is being accomplished with this effort?

  A. Organization to get "Visibility" over its exposure to sensitive personal information
  B. It is a part of the annual exercise per the organization's privacy policy/ processes
  C. Information security controls for confidential information being reviewed
  D. Gathering inputs to restructure privacy function
  C. Information security controls for confidential information being reviewed

• Question 4:

  Which of the following statements are true about the privacy statement of an organization?

  A. Content of the online privacy statement of an organization will depend upon the applicable laws, and may need to address requirements across geographical boundaries and legal jurisdictions
  B. As per privacy laws generally it is mandatory to mention the phone contact details of the owner of organization in the online privacy statement where customers can reach out in case of a grievance or incident
  C. Online privacy statement is an instrument to demonstrate to stakeholders how the organization gathers, uses, discloses, and manages personal data
  D. India's Information Technology (Amendment) Act, 2008 does not require that privacy policy be published on the website
  A. Content of the online privacy statement of an organization will depend upon the applicable laws, and may need to address requirements across geographical boundaries and legal jurisdictions

• Question 5:

  Which type of data qualify as Sensitive Personal Data or Information under Section 43A of IT (Amendment) Act, 2008?

  A. Sexual orientation
  B. Political affiliation
  C. Religion and caste
  D. Call Data Records (CDRs)
  A. Sexual orientation

• Question 6:

  According to IT (Amendment) Act,2008, who should designate a grievance officer to redress grievance(s) of provider of information?

  A. Data processor
  B. Third party agency collecting personal information
  C. Body corporate, which determines the means and purpose of data processing
  D. Natural person sharing his/her information
  B. Third party agency collecting personal information

• Question 7:

  What is not a best practice for maintaining privacy while sharing any personal information on social networking?

  A. Share it among a closed group
  B. Publishing on need basis
  C. Classify it private/secret while sharing
  D. Make it public to increase transparency
  B. Publishing on need basis

• Question 8:

  In June 2018, which US State passed a citizen proposed Consumer Privacy Act?

  A. California
  B. Texas
  C. Iowa
  D. Florida
  A. California

• Question 9:

  ______________ is a special arrangement between EU and US on Cross Border Data Flows that enables US companies to transfer personal data from EU organizations to the US for processing.

  A. EU-US Privacy Shield
  B. EU-US Safe harbor framework
  C. Adequacy Decision
  D. Convention 108
  B. EU-US Safe harbor framework

• Question 10:

  XYZ and Co., an Indian hospital specialized in dealing with cancer treatment has organized a free health checkup camp for women in a specific district, after seeking due permission from competent authorities. During the camp the hospital staffs will be feeding the medical records of these women into the computer connected to hospital network system.

  Does the said hospital need to notify its privacy policy to the women attending the camp and seek their consent regarding the collection and processing of such information?

  A. No, since it is a free checkup camp for their welfare
  B. Yes, in the any language as per the wishes of said hospital
  C. No, since the law does not require the same in this case
  D. Yes, in the language such women would understand
  B. Yes, in the any language as per the wishes of said hospital