Free DSCI Certified Privacy Lead Assessor Exam DCPLA Exam Practice Test

Your district council releases an interactive of map of orange trees in the district which shows that the locality in which your house is located has the highest concentration of orange trees. Does the council map contain your personal information?

• Yes – your ownership of the property is a matter of public record.
• No – Orange trees are not a person and so it can't have personal information.
• It depends – on the context of other information associated with the map.
• None of the above.

Which of the following best describes ‘Processing’?

• Processing is collection and use of personal data
• Processing is storage and structuring personal data
• Processing is recording and destruction of personal data
• Processing is a blanket term used for the wide range of operations performed on personal data

Which of the following provisions of Information Technology (Amendment) Act, 2008 deal with protection of PI or SPDI of Individuals?

• Section 43A & Section 72A
• Section 43A
• Section 65
• Section 43A & Section 65

Which of the following could be considered as triggers for updating privacy policy? (Choose all that apply.)

• Regulatory changes
• Privacy breach
• Change in service provider for an established business process
• Recruitment of more employees

Which of the following is not an objective of POR?

• Create an inventory of business processes, enterprise and operational functions, client relationships that deal with personal information
• Identify all the activities, functions and operations that can be attributed to the privacy initiatives of an organization
• Evaluate the role of corporate function in legal compliance management, its relations with IT, and security functions. Evaluate the role of legal function in compliance matters
• Establish a privacy function to address the activities, functions and operations that are required to manage the privacy initiatives

Which of the following are classified as Sensitive Personal Data or Information under Section 43A of ITAA, 2008? (Choose all that apply.)

• Password
• Financial information
• Sexual orientation
• Caste and religious beliefs
• Biometric information
• Medical records and history

Which of the following mechanisms can be used to transfer personal data outside of a country?

• Binding corporate rules
• Adequacy decision
• Standard contractual clauses
• All of the above

XYZ bank has recently decided to start offering online banking services. For doing so, the bank has outsourced its IT operations and processes to various third parties. Acknowledging privacy concerns, bank has decided to implement a privacy program. Assuming you have been tasked to deploy this framework for the bank, which of the following would most likely be your first step?

• Create an inventory of business processes that deal with personal information and identify the associated data element
• Ensure that bank is equipped to test the relevance of each legal and compliance requirement in its environment
• Assign privacy roles and responsibilities for process owners
• None of the above

It’s mandatory for the assesses to provide the pre-requisites to the assessor organization before commencement of the first phase of assessment.

• True
• False

Which of the following measures can an organization implement to establish regulatory compliance intelligence? (Choose all that apply.)

• Establish a process that keeps a track of applicable legal and regulatory changes
• Identify the liabilities imposed by the regulations with respect to specific data elements
• Ensure that a mechanism exists for quick and effective provisioning, de-provisioning and authorization of access to information or systems which are exposed to data
• Ensure that knowledge with respect to legal and regulatory compliances is managed effectively