DSCI DCPP-01 Exam Questions

Question 6 of 162

From the below listed options, identify the new privacy principle that is being advocated in proposed EU General Data Protection Regulation?

Right to be informed prior to sharing of data

Right to modify data

Right to be forgotten

Right to object data collection and processing

Correct Answer: C

Question 7 of 162

Which of the following statements are true about the privacy statement of an organization?

Content of the online privacy statement of an organization will depend upon the applicable laws, and may need to address requirements across geographical boundaries and legal jurisdictions

As per privacy laws generally it is mandatory to mention the phone contact details of the owner of organization in the online privacy statement where customers can reach out in case of a grievance or incident

Online privacy statement is an instrument to demonstrate to stakeholders how the organization gathers, uses, discloses, and manages personal data

India’s Information Technology (Amendment) Act, 2008 does not require that privacy policy be published on the website

Correct Answer: A

Question 8 of 162

With respect to ‘Data Minimization’ privacy principle, please select the correct statements from the following:

Right to object by the data subject for minimizing the collection of personal information

Data controllers should limit the amount of data collected to what is directly relevant and necessary to accomplish a specified purpose

Data controllers should retain the data only for as long as is necessary to fulfil the purpose for which it was collected

Process of analyzing and minimizing the collected data into useful information

Correct Answer: A

Question 9 of 162

Which of the following privacy principle deals with informed consent of the data subject before sharing the personal information (of the data subject) to third parties for processing?

Collection limitation

Purpose limitation

Disclosure of information

Accountability

Correct Answer: C

Question 10 of 162

For negligence in implementing and maintaining the reasonable security practices and procedures for protecting Sensitive Personal Data or Information (SPDI) as mentioned in Section 43A and associated rules under IT (Amendment) Act, 2008, a corporate entity may be liable to pay compensation of up to___________

Rs. 50,000,000

Rs. 500,000,000

Rs. 5,000,000

Upper limit not defined

Correct Answer: D