DCPP-01

DCPP-01 practice questions, page 4 of 7, with answer review and explanations.

Question 16

After the rules were notified under section 43A of the IT (Amendment) Act, 2008, a clarification was issued by the government which exempted the service providers, which get access to/processes Sensitive Personal Data or information (SPDI) under contractual agreement with a legal entity located within or outside India. Which privacy principle provisions notified under Sec 43A were exempted for the service providers?

  1. Consent
  2. Privacy policy (which is published)
  3. Access and Correction
  4. Disclosure of information

Question 17

Select the element(s) of APEC cross border privacy rules system from the following list: i. self-assessment ii. compliance review iii. recognition/acceptance by APEC members iv. dispute resolution and enforcement Please select correct option:

  1. i, ii and iii
  2. ii, iii, and iv
  3. i, iii and iv
  4. i, ii, iii and iv

Question 18

A ministry under government of India plans to collect citizens’ information related to their education, medical condition, economic status, caste and religion. As per the privacy requirements mentioned under Sec 43A of IT (Amendment) Act, 2008, the citizens’ ‘Consent’ would be mandatory for which of the following elements before their collection?

  1. Educational records
  2. Medical condition
  3. Caste and religion
  4. Sec 43A may not be applicable

Question 19

Which of the following legislations/ guidelines do not cover the concept of trans-border data flow?

  1. OECD
  2. IT (Amendment) Act, 2008
  3. PIPEDA
  4. None of the above

Question 20

XYZ is a successful startup that acquired a respectable size & scale of operations in last 3 years, handling business process services for small & medium scale enterprises, largely in US & Europe. They are at the stage of closing a deal with a new banking client and working out the details of privacy related obligations in contract. Ensuring effective enforcement of which of the below listed privacy principles is client’s accountability, even after outsourcing its loan approval process to XYZ? I: Notice - II: Choice and Consent - III: Collection Limitation - IV: Use Limitation - V: Access and Correction - VI: Security - VII: Disclosure to third Party - Please select the correct set of principles from below listed options:

  1. None of the above, since they are outsourcing the work to XYZ who will carry the liability going forward
  2. All except V and VI
  3. All except III
  4. All of the above listed privacy principles