A privacy lead assessor assessing your company for DSCI's privacy certification gets to know that your payroll process has been outsourced to a third party service provider. So, he/she is reviewing your contract with that service provider to ascertain which privacy related clauses are incorporated in the contract. What could be the possible reasons for reviewing the contract?

• A.Possible violation of 'Collection Limitation'
• B.Possible violation of 'Use Limitation'
• C.Risk of data subjects directly reaching to service provider
• D.Data security controls in third party provider's environment

Comment: *

Name: *

Email: *

Verification: *

Which of the following categories of information are generally protected under privacy laws?

• A.Personally Identifiable Information (PII)
• B.Sensitive Personal Information (SPI)
• C.Trademark, copyright and patent information
• D.Organizations' confidential business information

Comment: *

Name: *

Email: *

Verification: *

To establish a privacy organization structure in a bank, which one of the following is least practiced by the industry for the positioning of privacy organization?

• A.Privacy reporting to the Chief Information Officer (CIO)
• B.Privacy reporting to the Chief Risk Officer (CRO)
• C.Privacy reporting to corporate communication function
• D.Privacy reporting to legal function

Comment: *

Name: *

Email: *

Verification: *

With respect to 'Data Minimization' privacy principle, please select the correct statements from the following:

• A.Right to object by the data subject for minimizing the collection of personal information
• B.Data controllers should retain the data only for as long as is necessary to fulfil the purpose for which it
  was collected
• C.Data controllers should limit the amount of data collected to what is directly relevant and necessary to
  accomplish a specified purpose
• D.Process of analyzing and minimizing the collected data into useful information

Comment: *

Name: *

Email: *

Verification: *

Which of the following laid foundation for the development of OECD privacy principles for the promotion of free international trade and trans border data flows?

• A.Fair information Privacy Practices of US, 1974
• B.EU Data Protection Directive
• C.Safe Harbor Framework
• D.WTO's Free Trade Agreement

Comment: *

Name: *

Email: *

Verification: *