Free DSCI Certified Privacy Professional Exam DCPP-01 Exam Practice Test

According to RTI Act, under which conditions can a government department refuse to release information?

• National security adversely affected by such information
• This information is detrimental to the stability of the ruling party in government
• Detrimental effect on the public image of government agencies
• In the absence of a public interest, such information may adversely impact the privacy of its officials

If XYZ & Co. collects, stores and processes personal information of living persons, electronically in a structured filing system, then XYZ could be a:

• Data Processor
• Data Controller
• Data Subject
• Either A or B

Which among the following can be classified as the most important purpose for enactment of data protection/ privacy regulations across the globe?

• Protect the constitution
• Penalize the organizations and impose fines for failure to protect privacy
• Ensure peace in the society
• Protect individual rights

As part of the environment scanning to identify security risks to personal information, which of the following environments would be least relevant for the organization?

• Organization's own environment
• Service provider's environment
• Client's environment
• Government agencies' environment which seek lawful access to personal data

Which law does not require notification of personal data breaches?

• Japanese Act on the Protection of Personal Information
• UK Data Protection Act, 2018
• General Data Protection Regulation, 2016
• Information Technology (Amendment) Act, 2008

Which of the following instruments can be used for a legal data transfer when a company in the EU wishes to transfer data to Asian countries?

• Framework for the Privacy Shield
• Standard Contractual Clauses
• Data processors must be certified by ISO 27001 under customized contracts
• Binding Corporate Rules

According to the EU, which of the following steps is not relevant when transferring data from an EU member to a third country that does not meet EU standards?

• Obtaining approval by the Data Protection Authority or informing it
• Aligning data protection legislation across geographies
• Sizing up the security measures employed by the importing organization to account for the sensitivity of the data being transferred
• A model contract is signed

De-identification of personal information is advocated by which of the following privacy regulations?

• IT Act of India
• Australia's ANPP
• EU Data Protection Directive
• Canada's PIPEDA

A ministry under government of India plans to collect citizens' information related to their education, medical condition, economic status, caste and religion. As per the privacy requirements mentioned under Sec 43A of IT (Amendment) Act, 2008, the citizens' 'Consent' would be mandatory for which of the following elements before their collection?

• Educational records
• Medical condition
• Caste and religion
• Sec 43A may not be applicable

Which of the following statements is true with respect to organization's privacy training and awareness program?

• Should define roles and responsibilities of personnel in privacy function
• Should cover employees of service provider dealing with personal information
• Should necessarily cover official from Law Enforcement Agencies that request lawful access to personal information
• None of the above