DSCI DCPP-01 Online Practice Questions and Exam Preparation

DSCI DCPP-01 Online Questions & Answers

• Question 11:

  From the below listed options, identify the new privacy principle that is being advocated in proposed EU General Data Protection Regulation?

  A. Right to be informed prior to sharing of data
  B. Right to modify data
  C. Right to be forgotten
  D. Right to object data collection and processing
  C. Right to be forgotten

• Question 12:

  Which of the following mechanisms or steps are likely to be taken by an organization for implementing privacy program? i Deploying physical and technology safeguards to protect personal information assets

  ii. Privacy consideration in product and service design

  iii. Privacy implementation to focus only on projects impacted by privacy breaches

  iv.

  Benchmarking against industry peersA. All
  B. All except iii
  C. Only i, and ii
  D. Only i, ii and iv

  B. All except iii

• Question 13:

  With reference to APEC privacy framework, when personal information is to be transferred to another person or organization, whether domestically or internationally, "the ______________ should obtain the consent of the individual and exercise due diligence and take reasonable steps to ensure that the recipient person or organization will protect the information consistently with APEC information privacy principles".

  A. Personal Information Owner
  B. Personal Information Controller
  C. Personal Information Processor
  D. Personal Information Auditor
  B. Personal Information Controller

• Question 14:

  Which section of the IT (Amendment) Act, 2008 lays down the provision of punishment for offense of wrongful disclosure of personal information with the intent to cause wrongful loss or wrongful gain?

  A. Section 43A
  B. Section 65
  C. Section 72
  D. Section 72A
  D. Section 72A

• Question 15:

  Choose the correct statement:

  Projects like DNA profiling, UIDAI, collection of individual's statistics, etc.

  A. Are executed with a sole aim to ensure that privacy of individuals is maintained
  B. Have been initiated to provide services to citizens for maintaining their online privacy only
  C. Have raised the need for a comprehensive privacy legislation at national level
  D. Have enforced a privacy legislation at national level
  B. Have been initiated to provide services to citizens for maintaining their online privacy only

• Question 16:

  Select the element(s) of APEC cross border privacy rules system from the following list:

  i. self-assessment

  ii. compliance review

  iii. recognition/acceptance by APEC members

  iv.

  dispute resolution and enforcement Please select correct option:

  A. i, ii and iii
  B. ii, iii, and iv
  C. i, iii and iv
  D. i, ii, iii and iv
  C. i, iii and iv

• Question 17:

  A multinational company with operations in several parts within EU and outside EU, involves international data transfer of both its employees and customers. In some of its EU branches, which are relatively larger in size, the organization has a works council. Most of the data transferred is personal, and some of the data that the organization collects is sensitive in nature, the processing of some of which is also outsourced to its branches in Asian countries.

  For the outsourced work of its customers' data processing, in order to initiate data transfer to another organizations outside EU, which is the most appropriate among the following?

  A. The vendor (data importer) in the third country, and not the exporter is responsible to put in place suitable model contractual clauses, and hence the exporter does not need to take any action.
  B. Since the data is processed by the vendor outside the EU, the EU directive does not apply and hence there are no legal concerns
  C. The data exporter needs to initiate model contractual clauses after obtaining approvals from data protection commissioner and have the vendor be a signatory on the same as data importer
  D. The data importer need to notify about the transfer to data protection commissioner in the destination country and exporter need to similarly notify in the EU country of origin
  D. The data importer need to notify about the transfer to data protection commissioner in the destination country and exporter need to similarly notify in the EU country of origin

• Question 18:

  BS 10012 is a British standard used to establish ___________.

  A. Personal information management system
  B. Privacy technology architecture
  C. Privacy reference architecture
  D. Privacy by design framework
  A. Personal information management system

• Question 19:

  Which of the following statement is incorrect?

  A. Privacy policy may be derived from outcomes of privacy impact assessment.
  B. Misuse of personal information available in public domain may be construed as a privacy violation.
  C. A privacy policy once framed cannot be changed before the specified review period.
  D. None of the Above
  B. Misuse of personal information available in public domain may be construed as a privacy violation.

• Question 20:

  Which among the following can be classified as the most important purpose for enactment of data protection/ privacy regulations across the globe?

  A. Protect the constitution
  B. Penalize the organizations and impose fines for failure to protect privacy
  C. Ensure peace in the society
  D. Protect individual rights
  D. Protect individual rights