Company A collects and stores information from people X & Y on behalf of company B. Which of the following statements are true?

• A.A is the data controller since it collects data directly from X & Y
• B.B is the data controller while A is the sub processor as B has outsourced the data collection and processing to A
• C.B is the data controller that uses A as data processor to collect and process data of data subjects X and Y
• D.Both A & B are data controllers since both need to maintain highest principles of data protection

Comment: *

Name: *

Email: *

Verification: *

Complete the sentence:
The Gramm-Leach-Bliley Act (GLBA) of US regulates the privacy practices adopted by financial institutions, requiring them to provide adequate security of the customer records. It lays various obligations on the financial institutions but allows such financial institutions to share the non-public information of customers (after properly notifying their consumers in a manner mentioned in the Act) with

• A.Its affiliates only after obtaining explicit consent from the consumers
• B.Its affiliates after obtaining explicit permission of Federal Trade Commission
• C.Its affiliates without need for obtaining explicit consent from the consumers for sharing their data
• D.Its affiliates after disclosure in initial and annual GLBA privacy notices

Comment: *

Name: *

Email: *

Verification: *

Which of the following categories of information are generally protected under privacy laws?

• A.Organizations' confidential business information
• B.Personally Identifiable Information (PII)
• C.Trademark, copyright and patent information
• D.Sensitive Personal Information (SPI)

Comment: *

Name: *

Email: *

Verification: *

Select the element(s) of APEC cross border privacy rules system from the following list:
i. self-assessment
ii. compliance review
iii. recognition/acceptance by APEC members
iv. dispute resolution and enforcement
Please select correct option:

• A.i, ii and iii
• B.ii, iii, and iv
• C.i, iii and iv
• D.i, ii, iii and iv

Comment: *

Name: *

Email: *

Verification: *

De-identification of personal information is advocated by which of the following privacy regulations?

• A.Canada's PIPEDA
• B.IT Act of India
• C.Australia's ANPP
• D.EU Data Protection Directive

Comment: *

Name: *

Email: *

Verification: *