DSCI DSCI Certifications DCPP-01 Questions & Answers

• Question 111:

  "Any company joining the EU-US Privacy Shield has to self-certify to the US Department of Commerce and make a public commitment to the same".

  Is this statement True or False?

  A. True

  B. False

  Correct Answer: A

• Question 112:

  The _______________ amended PIPEDA to introduce the concept of `valid consent', which elaborates on the existing consent requirements.

  A. Digital Privacy Act, 2015

  B. Data Privacy Act, 2015

  C. Digital Protection Act, 2015

  D. Data Protection Regulation, 2015

  Correct Answer: D

• Question 113:

  An Indian company provides BPM services to a US based health insurance company. One rogue of the employees of the Indian company exported patient data of the customers of the insurance company and provided it to another US based insurance company. Although the employee was charged for theft, the company and its executives also faced legal proceedings in India because (please select the most appropriate possible reason):

  A. They did not conduct background verification of individuals.

  B. They allowed access to sensitive personal information to employees of the company.

  C. They did not implement reasonable security practices for data protection.

  D. They did not implement data loss prevention tools to prevent such actions.

  Correct Answer: C

• Question 114:

  What is the maximum penalty for non-compliance under GDPR?

  A. 10 million euros or 2% of annual global turnover of the organization in the preceding financial year, whichever is greater

  B. 4% of annual revenue or 10 million, whichever is lower

  C. 20 million euros or 4% of global turnover of the organization in the preceding financial year, whichever is greater.

  D. none of the above

  Correct Answer: A

• Question 115:

  The term "Data Handlers" is synonymous with which of the following privacy legislations?

  A. South Korea's Personal Information Protection Act

  B. Digital Privacy Act, 2015

  C. Federal Data Protection Act, Germany (BDSG)

  D. Child online protection Act, 1998

  Correct Answer: A

• Question 116:

  General Data Protection Regulation, 2016 applies to processing of personal data of natural persons that are:

  A. EU Citizens

  B. EU Residents

  C. None of the above

  Correct Answer: A

• Question 117:

  Which among the following countries has not been granted adequacy status by EU authorities, so far?

  A. Brazil

  B. Argentina

  C. Canada

  D. New Zealand

  Correct Answer: A

• Question 118:

  The Qatar Concerning Privacy and Protection of Personal Data Act, 2016 applies to:

  A. Only personal data that is electronically processed

  B. Only personal data that is manually processed

  C. Personal data that is electronically or manually processed

  Correct Answer: A

• Question 119:

  Choose the correct grouping of privacy principles into user centric (requiring data subjects' involvement) and organization centric (confined to organization processes and procedures) from the following options:

  A. User Centric: Notice, Consent, Collection Limitation, Access and Correction Organization Centric: Choice, Use Limitation, Security, Disclosure to third party, Openness, Accountability

  B. User Centric: Consent, Choice, Collection Limitation, Access and Correction Organization Centric: Notice, Use Limitation, Security, Disclosure to third party, Openness,

  Accountability

  C. User Centric: Notice, Consent, Choice, Access and Correction Organization Centric: Collection Limitation, Use Limitation, Security, Disclosure to third party, Openness, Accountability

  D. User Centric: Notice, Consent, Openness, Accountability Organization Centric: Choice, Collection Limitation, Use Limitation, Security, Disclosure to third party, Access and Correction

  Correct Answer: A

• Question 120:

  As per GDPR, by means of an intra group scheme, an organization can offer sufficient data protection safeguards and put in place data transfer arrangements within their organization and some of their establishments which are located outside the EU/EEA to enable transfer of personal data outside the region.

  This internal code of transfer is known as _______.

  A. Company Code of Conduct

  B. Binding Corporate Rules

  C. Standard Contractual Clauses

  D. Binding Transfer Rules

  Correct Answer: B