Free DSCI Certified Privacy Professional Exam DCPP-01 Exam Practice Test

If XYZ & Co. collects, stores and processes personal information of living persons, electronically in a structured filing system, then XYZ could be a:

• Data Processor
• Data Controller
• Data Subject
• Either A or B

What are the roles an organization can play from privacy perspective?i. Data Controller -- determines the means and purpose of processing of data which is collected from its end customersii. Data Controller -- determines the means and purpose of processing of data which is collected from its employeesiii. Data Sub-Processor -- processes personal data on behalf of data processoriv. Joint Controller -- determines the means and purpose of data processing along with other data controllerPlease select correct option:

• i, ii and iii
• ii, iii and iv
• i, iii and iv
• i, ii, iii and iv

Which of the following doesn't contribute, or contributes the least, to the growing data privacy challenges in today's digital age?

• Social media
• Mass surveillance
• Use of secure wireless connections
• Increase in digitization of personal information

By collecting, storing, and processing personal information on living individuals electronically, Star Link Company could qualify as:

• Data Subject
• Data Processor
• Data Controller

Which type of data qualify as Sensitive Personal Data or Information under Section 43A of IT (Amendment) Act, 2008?

• Sexual orientation
• Political affiliation
• Religion and caste
• Call Data Records (CDRs)

Which of the following categories of information are generally protected under privacy laws?

• Personally Identifiable Information (PII)
• Sensitive Personal Information (SPI)
• Trademark, copyright and patent information
• Organizations' confidential business information

Under which of the following conditions can a government department refuse to release information under the provisions of RTI Act?

• Adverse impact of such information on the stability of the ruling party in government
• Adverse impact of such information on national security
• Adverse impact of such information on personal privacy of its officials if it does not satisfy the public interest at large
• Adverse impact of such information on the public image of the government department

From the below listed options, identify the new privacy principle that is being advocated in proposed EU General Data Protection Regulation?

• Right to be informed prior to sharing of data
• Right to modify data
• Right to be forgotten
• Right to object data collection and processing

When you're based in the EU and willing to share data outside the EU/EEA, then you can use model contracts. In reference to the above statement, which of the following is true?

• Directive on EU e-commerce mentions it as a requirement
• EU Data Protection Directive states that it is a requirement
• OECD's Privacy Framework mentions it as a requirement
• Neither of the above

Technological advancement is inevitable and the speed of change is exponential. In such a scenario, which of the following statement is not true for defining the relationship between privacy protection and technology advancement, both at individual and corporate levels?

• Maintaining privacy is difficult with emerging platforms and services
• Maintaining privacy is difficult, as exercising complete control over personal information in online environment is an uphill task
• Technology advancements and privacy protection are independent concepts that are not related
• Maintaining privacy in cyberspace becomes easier with proper use of tools and technologies