Question 1

Health insurance firm based in the US uses BPM services provided by an Indian company. It was found that one of the employees of the Indian company exported customer data of the insurance company to another US-based insurance company. Under which of the below ground, the company and its executives in India were also subjected to legal action ?

Options :

A : These actions were not avoided by using data loss prevention tools.

B : No reasonable security practices were implemented to protect data.

C : Employees of the company were allowed to view sensitive personal information.

D : Background checks were not conducted on the individuals.

Answer: B

Question 2

The Information Technology (Reasonable Security Practices And Procedures and Sensitive Data orInformation) Rules, 2011 incorporate which of the following privacy concepts and principles:i. Collection Limitationii. Accountabilityiii. Right to be forgotteniv. Purpose Limitationv. Access and correction

Options :

A : i, ii, iii and iv

B : I, ii, iv and v

C : I, iii, iv and v

D : All the above

Answer: B

Question 3

Which of the following provides the legal basis for an Adjudicating Officer in every Indian state & union territory, with the powers of a civil court, to hear complaints and order compensation to the affected individuals?

Options :

A : Indian Civil Code

B : Indian Criminal Procedure Code

C : Telecom Regulatory Authority of India (TRAI) Act

D : Information Technology Act, 2000 & Information Technology (Amendment) Act, 2008

Answer: A

Question 4

A company collects personal information about its employees and requests them to provide accurate information in order to avail benefits such as life insurance and medical insurance. Employees of the company have raised concerns about use of their personal information. Due to the concerns, the company has decided to create a privacy policy. What all should the company include in its privacy policy to address the raised concerns?

Options :

A : The purpose of collection of personal data

B : The principle of presumed consent for data disclosure to avail benefits

C : Information about how personal information is processed and used, specifically

D : Contact details of Law Enforcement Agencies (LEA) to whom information is disclosed

Answer: C

Question 5

Under GDPR, the European Commission takes the adequacy decision in relation to privacy laws in a third country, territory, sector etc. A subjective approach is taken. For the assessment of whether a third country, a territory, or one or more specific sectors within that third country, or an international organization has an adequate level of protection, who is required to provide an opinion to the Commission?

Options :

A : European Data Protection Board

B : Lead Supervisory Authority

C : Article 29 Working Party

D : Convention 108 Council

Answer: A

Confidently Practice Online with Free DCPP-01 Exam Cram

Buying Options: