Free DSCI Certified Privacy Lead Assessor Exam DCPLA Exam Practice Test

“Data which cannot be attributed to a particular data subject without use of additional information.” Which of the following best describes the above statement?

• Anonymized Data
• Metadata
• Pseudonymized Data
• None of the above

Which of the following does the ‘Privacy Strategy & Processes’ layer in the DPF help accomplish? (Choose all that apply.)

• Visibility over Personal Information
• Privacy Policy and Processes
• Regulatory Compliance Intelligence
• Information Usage and Access
• Personal Information Security

Which of the following measures can an organization implement to establish regulatory compliance intelligence? (Choose all that apply.)

• Establish a process that keeps a track of applicable legal and regulatory changes
• Identify the liabilities imposed by the regulations with respect to specific data elements
• Ensure that a mechanism exists for quick and effective provisioning, de-provisioning and authorization of access to information or systems which are exposed to data
• Ensure that knowledge with respect to legal and regulatory compliances is managed effectively

It’s mandatory for the assesses to provide the pre-requisites to the assessor organization before commencement of the first phase of assessment.

• True
• False

Privacy enhancing tools aim to allow users to take one or more of the following actions related to their personal data that is sent to, and used by online service providers, merchants or other users: I) Increase control over their personal data II) Choose whether to use services anonymously or not III) Obtain informed consent about sharing their personal data IV) Opt-out of behavioral advertising or any other use of data

• Only I
• Only I and II
• I, II, III and IV
• Only II

Entities should collect personal information from user that is adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed. This Privacy Principle is called:

• Collection Limitation
• Use Limitation
• Accountability
• Storage Limitation

Section 43A of the Information Technology (Amendment) Act, 2008 holds____________ accountable for having reasonable security practices and procedures in place to protection sensitive personal data.

• Government
• Body corporates
• Government and body corporates alike
• None of the above

The method of personal data usage in which the users must explicitly decide not to participate.

• Opt-In
• Opt-out
• Data mining
• Data matching

As a privacy lead assessor assessing the company for DSCI’s privacy certification, you are assessing the adequacy of resources and skills in the organization, to address privacy related responsibilities. Which DSCI Privacy Framework (DPF©) practice area is relevant?

• Visibility over Personal Information (VPI)
• Privacy Organization and Relationship (POR)
• Privacy Awareness and Training (PAT)
• Information Usage and Access (IUA)

Which of the following could be considered as triggers for updating privacy policy? (Choose all that apply.)

• Regulatory changes
• Privacy breach
• Change in service provider for an established business process
• Recruitment of more employees