Please select the incorrect statement in context of "Online Privacy":

• A.A person's act of 'Selective disclosure" (of themselves) in an online environment
• B.A person's concern over usage of information that were collected during an online activity
• C.A person's control over collection of information during an online activity
• D.A person's concern on the software licensing agreement they sign with any organization

Comment: *

Name: *

Email: *

Verification: *

Effective 2013, HIPAA Omnibus rule applies to which of the following?

• A.Covered Entities only
• B.Business Associates only
• C.Covered Entities & Business Associates
• D.Federal Health Bodies only

Comment: *

Name: *

Email: *

Verification: *

A multinational company with operations in several parts within EU and outside EU, involves international
data transfer of both its employees and customers. In some of its EU branches, which are relatively larger in
size, the organization has a works council. Most of the data transferred is personal, and some of the data that
the organization collects is sensitive in nature, the processing of some of which is also outsourced to its
branches in Asian countries.
Which of the following are not mandatory pre-requisite before transferring sensitive personal data to its Asian
branches?

• A.Notifying the data subject
• B.Self-certifying to Safe Harbor practices and reporting to Federal Trade Commission
• C.Determining adequacy status of the country
• D.Conducting risk assessment for the processing involved

Comment: *

Name: *

Email: *

Verification: *

APEC privacy framework envisages common principles such as Notice, Collection limitation, Use Limitation, Access and Correction, Security/Safeguards, and Accountability. But it differs from the EU Data Protection Directive in which of the below aspect?

• A.APEC privacy framework does not mandate the binding treaties or directives for member countries
• B.APEC privacy framework does not have a provision for co-operation between privacy enforcement agencies of members
• C.APEC privacy framework does not deal with e-commerce
• D.APEC privacy framework does not deal with the usage of personal information

Comment: *

Name: *

Email: *

Verification: *

Which of the following aspects of personal information lifecycle management should the privacy function in an organization be concerned with i. Policy definition ii. Policy enforcement iii. IT infrastructure setup iv. Physical infrastructure setup Please select the correct option:

• A.Only i.
• B.Only i. and ii.
• C.All
• D.All except iv

Comment: *

Name: *

Email: *

Verification: *