Which of the following activities form part of an organization's Visibility over Personal Information (VPI)
initiative, according to DSCI Privacy Framework (DPF)?

• A.'Data processing environment' analysis of industry peers
• B.'Data processing environment' analysis of the organization and associated third parties
• C.'Data processing environment' analysis of the country
• D.'Data processing environment' analysis of the organization only

Comment: *

Name: *

Email: *

Verification: *

Under the OECD Privacy Guidelines, 1980, which of the following was not a privacy principle?

• A.Security Safeguard
• B.Openness
• C.Purpose Specification
• D.Data minimization

Comment: *

Name: *

Email: *

Verification: *

Which of the following legislations/ guidelines do not cover the concept of trans-border data flow?

• A.OECD
• B.IT (Amendment) Act, 2008
• C.PIPEDA
• D.None of the above

Comment: *

Name: *

Email: *

Verification: *

Effective 2013, HIPAA Omnibus rule applies to which of the following?

• A.Covered Entities only
• B.Business Associates only
• C.Covered Entities & Business Associates
• D.Federal Health Bodies only

Comment: *

Name: *

Email: *

Verification: *

Which of the following is not required by an organization in US, resorting to EU-US Safe Harbor provisions,
to transfer personal information from EU member nation to US?

• A.Disclose their privacy policy publicly
• B.Sign standard contractual clauses with data exporters in EU
• C.Notify FTC of the self-certification
• D.Adherence to the seven safe harbor principles

Comment: *

Name: *

Email: *

Verification: *