DCPP-01

DCPP-01 practice questions, page 2 of 7, with answer review and explanations.

Question 6

From the below listed options, identify the new privacy principle that is being advocated in proposed EU General Data Protection Regulation?

  1. Right to be informed prior to sharing of data
  2. Right to modify data
  3. Right to be forgotten
  4. Right to object data collection and processing

Question 7

Which of the following statements are true about the privacy statement of an organization?

  1. Content of the online privacy statement of an organization will depend upon the applicable laws, and may need to address requirements across geographical boundaries and legal jurisdictions
  2. As per privacy laws generally it is mandatory to mention the phone contact details of the owner of organization in the online privacy statement where customers can reach out in case of a grievance or incident
  3. Online privacy statement is an instrument to demonstrate to stakeholders how the organization gathers, uses, discloses, and manages personal data
  4. India’s Information Technology (Amendment) Act, 2008 does not require that privacy policy be published on the website

Question 8

With respect to ‘Data Minimization’ privacy principle, please select the correct statements from the following:

  1. Right to object by the data subject for minimizing the collection of personal information
  2. Data controllers should limit the amount of data collected to what is directly relevant and necessary to accomplish a specified purpose
  3. Data controllers should retain the data only for as long as is necessary to fulfil the purpose for which it was collected
  4. Process of analyzing and minimizing the collected data into useful information

Question 9

Which of the following privacy principle deals with informed consent of the data subject before sharing the personal information (of the data subject) to third parties for processing?

  1. Collection limitation
  2. Purpose limitation
  3. Disclosure of information
  4. Accountability

Question 10

For negligence in implementing and maintaining the reasonable security practices and procedures for protecting Sensitive Personal Data or Information (SPDI) as mentioned in Section 43A and associated rules under IT (Amendment) Act, 2008, a corporate entity may be liable to pay compensation of up to___________

  1. Rs. 50,000,000
  2. Rs. 500,000,000
  3. Rs. 5,000,000
  4. Upper limit not defined