Free DCPLA Mock Exam – Practice Online Confidently

With respect to privacy monitoring and incident management process, which of the following should be a part ofa standard incident handling process?I. Incident identification and notificationII. Investigation and remediationIII. Root cause analysisIV. User awareness training on how to report incidents

Classify the following scenario as major or minor non-conformity. “The organization defined information access and usage policy and rolled it out across the organization. No formal exercise, however, was conducted to prepare the policy. During implementation, certain discrepancies came out and these were addressed through appropriate policy revisions, though this created a lot of hue and cry in the organization and the policy was criticized for adversely affecting productivity. But with appropriate revisions and passage of time, the policy has been accepted. In a recently conducted external audit, one incident has come to light wherein the usage and access policy has been violated by an employee twice. As per the auditor, this incident should have been identified by the organization. In its explanation to the auditor, the management informed that appropriate access and usage monitoring mechanisms have been put in place but admitted that there may have been some lapses.”

The concept of data adequacy is based on the principle of _________. 

Which of the following are the key factors that need to be considered for determining the applicability of the privacy principles? (Choose all that apply.)

What is a Data Subject? (Choose all that apply.)