According to EU authorities, which country has yet to receive adequacy status?

• A.Brazil
• B.Argentina
• C.New Zealand
• D.Canada

Comment: *

Name: *

Email: *

Verification: *

Under GDPR, the European Commission takes the adequacy decision in relation to privacy laws in a third country, territory, sector etc. A subjective approach is taken. For the assessment of whether a third country, a territory, or one or more specific sectors within that third country, or an international organization has an adequate level of protection, who is required to provide an opinion to the Commission?

• A.European Data Protection Board
• B.Article 29 Working Party
• C.Lead Supervisory Authority
• D.Convention 108 Council

Comment: *

Name: *

Email: *

Verification: *

Which of the following aspects of personal information lifecycle management should the privacy function in an organization be concerned with i. Policy definition ii. Policy enforcement iii. IT infrastructure setup iv. Physical infrastructure setup Please select the correct option:

• A.Only i.
• B.Only i. and ii.
• C.All
• D.All except iv

Comment: *

Name: *

Email: *

Verification: *

Choose from the options below to group privacy principles into user centric (requiring people's involvement) and organization centric (restricted to processes within the organization) categories:

• A.User Centric: Choice, Collection Limitation, Access and Correction Organization Centric: Notice, Use Limitation, Security, Disclosure to third party, Accountability
• B.User Centric: Notice, Consent, Collection Limitation, Access and Correction Organization Centric: Choice, Use Limitation, Security, Disclosure to third party, Openness, Accountability
• C.User Centric: Notice, Openness, Accountability Organization Centric: Consent, Choice, Collection Limitation, Use Limitation, Security, Disclosure to third party, Access & Correction
• D.User Centric: Notice, Consent, Choice, Access & Correction Organization Centric: Consent, Collection Limitation, Use Limitation, Security, Disclosure to third party, Openness, Accountability

Comment: *

Name: *

Email: *

Verification: *

Which of the following parameters should ideally be addressed by a privacy program of an organization?

• A.Privacy incident response plan and grievance handling
• B.Environmental security concerns
• C.Training and data classification
• D.Intellectual Property (IP) protection

Comment: *

Name: *

Email: *

Verification: *