DCPP-01

DCPP-01 practice questions, page 5 of 7, with answer review and explanations.

Question 21

Which of the following categories of information are generally protected under privacy laws?

  1. Personally Identifiable Information (PII)
  2. Sensitive Personal Information (SPI)
  3. Trademark, copyright and patent information
  4. Organizations’ confidential business information

Question 22

Effective 2013, HIPAA Omnibus rule applies to which of the following?

  1. Covered Entities only
  2. Business Associates only
  3. Covered Entities & Business Associates
  4. Federal Health Bodies only

Question 23

A US IT company has created a cloud based application for Canadian consumers only, with servers located in Vancouver, Canada. The application allows its users to publish their short stories, essays or e-books. The purpose of the application, i.e. literary work, is clearly stated in the terms and conditions which are mandatorily acknowledged by each user. With respect to this application, the company must ensure compliance with:

  1. PIPEDA
  2. US Consumer Privacy Bill of Rights
  3. EU Data Protection Directive
  4. None of the above

Question 24

XYZ & Co., an Indian hospital specialized in dealing with cancer treatment has organized a free health checkup camp for women in a specific district, after seeking due permission from competent authorities. During the camp the hospital staffs will be feeding the medical records of these women into the computer connected to hospital network system. Does the said hospital need to notify its privacy policy to the women attending the camp and seek their consent regarding the collection and processing of such information?

  1. No, since it is a free checkup camp for their welfare
  2. Yes, in the any language as per the wishes of said hospital
  3. No, since the law does not require the same in this case
  4. Yes, in the language such women would understand

Question 25

Under which of the following conditions can a company in India may transfer sensitive personal information (SPI) to any other company or a person in India, or located in any other country?

  1. Transfer of information is allowed to those who ensure the same level of data protection that is adhered to by the company as provided for under the Indian laws
  2. The transfer of information is allowed only after taking approval of Chief Information Commissioner of India
  3. The transfer of information is allowed only after taking approval of ministry of electronics and information technology
  4. The transfer may be allowed only if it is necessary for the performance of the lawful contract or where the data subject has consented to data transfer