Free DSCI DCPP-01 Exam Dumps Questions & Answers

According to the privacy statement of an organization, which of the following words is true?

• A.The content of an organization's online privacy statement will be influenced by the applicable laws, and may need to address requirements across geographic boundaries and legal jurisdictions
• B.The Information Technology (Amendment) Act, 2008 does not require the publication of privacy policies on websites in India
• C.A privacy statement demonstrates to stakeholders how an organization gathers, uses, discloses, and manages personal information
• D.In order to follow privacy laws, it is mandatory that there is a phone contact information for the organization's owner in the online privacy statement so that customers can reach out in case of a concern or incident, which can be managed online

For negligence in implementing and maintaining the reasonable security practices and procedures for protecting Sensitive Personal Data or Information (SPDI) as mentioned in Section 43A and associated rules under IT (Amendment) Act, 2008, a corporate entity may be liable to pay compensation of up to___________

• A.Upper limit not defined
• B.Rs. 500,000,000
• C.Rs. 50,000,000
• D.Rs. 5,000,000

When sharing personal information (of the data subject) with third parties for processing, which of the following privacy principles includes informed consent?

• A.Purpose limitation
• B.Accountability
• C.Collection limitation
• D.Disclosure of information

You are part of a team that has been created by Indian government to create India's privacy law based on recommendations in Justice AP Shah's Report. Which of the following provisions should be addressed in the law?

• A.National privacy principles
• B.Privacy as an explicit fundamental constitutional right
• C.Offences, penalties and remedies
• D.Setup of a national data controller registry

A multinational company with operations in several parts within EU and outside EU, involves international data transfer of both its employees and customers. In some of its EU branches, which are relatively larger in size, the organization has a works council. Most of the data transferred is personal, and some of the data that the organization collects is sensitive in nature, the processing of some of which is also outsourced to its branches in Asian countries.
Which of the following are not mandatory pre-requisite before transferring sensitive personal data to its Asian branches?

• A.Determining adequacy status of the country
• B.Self-certifying to Safe Harbor practices and reporting to Federal Trade Commission
• C.Notifying the data subject
• D.Conducting risk assessment for the processing involved