DCPP-01 Practice Exam Questions and Answers

A non-public document issued by a data controller that directs data processors to adhere to certain privacy principles while processing personal information may be referred to as:

A team created by the Indian government has been assigned to create India's privacy law based on Justice AP Shah's recommendations. Is any of the following legislation necessary?

Which law does not require notification of personal data breaches?

As part of the environment scanning to identify security risks to personal information, which of the following environments would be least relevant for the organization?

Which of the following are needed for projects like DNA profiling, UIDAI, and statistical collection of individuals ?

With respect to privacy notice, what are the responsibilities of data controller?

Rising economic value of personal information has stressed the need for a comprehensive __________ legislation in India.

In India, who among the following would be the authorized legal entities to monitor and intercept communication of individuals?

What are the roles an organization can play from privacy perspective?

i. Data Controller – determines the means and purpose of processing of data which is collected from its end customers

ii. Data Controller – determines the means and purpose of processing of data which is collected from its employees

iii. Data Sub-Processor – processes personal data on behalf of data processor

iv. Joint Controller – determines the means and purpose of data processing along with other data controller

Please select correct option:

A country should allow its citizens to access specific information owned by the government in order to bring transparency in the government administration processes. This is the basis for formulation of which of the following rights in India?

Technological advancement is inevitable and the speed of change is exponential. In such a scenario, which of the following statement is not true for defining the relationship between privacy protection and technology advancement, both at individual and corporate levels?

If XYZ & Co. collects, stores and processes personal information of living persons, electronically in a structured filing system, then XYZ could be a:

A multinational company with operations in several parts within EU and outside EU, involves international data transfer of both its employees and customers. In some of its EU branches, which are relatively larger in size, the organization has a works council. Most of the data transferred is personal, and some of the data that the organization collects is sensitive in nature, the processing of some of which is also outsourced to its branches in Asian countries.

For the outsourced work of its customers’ data processing, in order to initiate data transfer to another organizations outside EU, which is the most appropriate among the following?

According to IT (Amendment) Act,2008, who should designate a grievance officer to redress grievance(s) of provider of information?

Companies based in EU and willing to transfer data outside the EU/EEA, use model contracts as an instrument. Which of the following statements are true in reference to above statement?

After the rules were notified under section 43A of the IT (Amendment) Act, 2008, a clarification was issued by the government which exempted the service providers, which get access to/processes Sensitive Personal Data or information (SPDI) under contractual agreement with a legal entity located within or outside India. Which privacy principle provisions notified under Sec 43A were exempted for the service providers?

Indian constitution does not expressly provide for the “right to privacy” to its citizens. However, there were various judicial pronouncements of the apex court which finally established the “right to privacy” as a fundamental right subsumed under Article 21 of the constitution of India. Article 21 inter alia provides and protects the __________________.

You are part of a team that has been created by Indian government to create India’s privacy law based on recommendations in Justice AP Shah’s Report. Which of the following provisions should be addressed in the law?