Question 1

Indian constitution does not expressly provide for the “right to privacy” to its citizens. However, there were various judicial pronouncements of the apex court which finally established the “right to privacy” as a fundamental right subsumed under Article 21 of the constitution of India. Article 21 inter alia provides and protects the __________________.

Options :

A : Right to Life and Personal liberty

B : Right to Opportunity

C : Right to Freedom of Speech and Expression

D : Right to Equality before law

Answer: A

Question 2

Under which of the following conditions can a company in India may transfer sensitive personal information (SPI) to any other company or a person in India, or located in any other country?

Options :

A : Transfer of information is allowed to those who ensure the same level of data protection that is adhered to by the company as provided for under the Indian laws

B : The transfer of information is allowed only after taking approval of Chief Information Commissioner of India

C : The transfer of information is allowed only after taking approval of DeitY (Department of Electronics & Information Technology) in India

D : The transfer may be allowed only if it is necessary for the performance of the lawful contract or where the data subject has consented to data transfer

Answer: A

Question 3

With respect to privacy governance, which of the following statements are correct?

Options :

A : Privacy governance defines the specifications for privacy operations performed on data processed through computer resource only

B : Privacy governance provides privacy strategy and direction, and takes decisions on key privacy issues

C : Privacy governance addresses day-to-day privacy incidents with processes established by privacy policies and procedures.

D : Privacy governance ensures that privacy issues are not left unaddressed in the organization.

Answer: B

Question 4

A company collects personal information about its employees and requests them to provide accurate information in order to avail benefits such as life insurance and medical insurance. Employees of the company have raised concerns about use of their personal information. Due to the concerns, the company has decided to create a privacy policy. What all should the company include in its privacy policy to address the raised concerns?

Options :

A : The purpose of collection of personal data

B : The principle of presumed consent for data disclosure to avail benefits

C : Information about how personal information is processed and used, specifically

D : Contact details of Law Enforcement Agencies (LEA) to whom information is disclosed

Answer: C

Question 5

“The adequacy agreement between EU and Japan is the first ever mutual adequacy decision under EU GDPR”. Is this statement True or False?

Options :

A : True

B : False

Answer: A

Higher Test Marks with Free Online DCPP-01 Exam Practice

Buying Options: