A company collects personal information about its employees and requests them to provide accurate information in order to avail benefits such as life insurance and medical insurance. Employees of the company have raised concerns about use of their personal information. Due to the concerns, the company has decided to create a privacy policy. What all should the company include in its privacy policy to address the raised concerns?

• A.Information about how personal information is processed and used, specifically
• B.Contact details of Law Enforcement Agencies (LEA) to whom information is disclosed
• C.The principle of presumed consent for data disclosure to avail benefits
• D.The purpose of collection of personal data

Comment: *

Name: *

Email: *

Verification: *

According to the privacy statement of an organization, which of the following words is true?

• A.In order to follow privacy laws, it is mandatory that there is a phone contact information for the organization's owner in the online privacy statement so that customers can reach out in case of a concern or incident, which can be managed online
• B.The content of an organization's online privacy statement will be influenced by the applicable laws, and may need to address requirements across geographic boundaries and legal jurisdictions
• C.The Information Technology (Amendment) Act, 2008 does not require the publication of privacy policies on websites in India
• D.A privacy statement demonstrates to stakeholders how an organization gathers, uses, discloses, and manages personal information

Comment: *

Name: *

Email: *

Verification: *

As a privacy assessor, what would most likely be the first artifact you would ask for while assessing an organization which claims that it has implemented a privacy program?

• A.Personal information management policy
• B.Records of deployed privacy notices and statements
• C.Records of privacy specific training imparted to the employees handling personal information
• D.Privacy risk management framework

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements is true with respect to organization's privacy training and awareness program?

• A.Should define roles and responsibilities of personnel in privacy function
• B.Should necessarily cover official from Law Enforcement Agencies that request lawful access to personal information
• C.Should cover employees of service provider dealing with personal information
• D.None of the above

Comment: *

Name: *

Email: *

Verification: *

Which one of the following is considered as the first step of evolution in the formation of today's concept of privacy?

• A.Fundamental civil liberty
• B.Universal declaration of human rights
• C.Right to be left alone
• D.Binding corporate rules

Comment: *

Name: *

Email: *

Verification: *