Question 1

Which of the following provides the legal basis for an Adjudicating Officer in every Indian state & union territory, with the powers of a civil court, to hear complaints and order compensation to the affected individuals?

Options :

A : Indian Civil Code

B : Indian Criminal Procedure Code

C : Telecom Regulatory Authority of India (TRAI) Act

D : Information Technology Act, 2000 & Information Technology (Amendment) Act, 2008

Answer: A

Question 2

Choose from the options below to group privacy principles into user centric (requiring people's involvement) and organization centric (restricted to processes within the organization) categories:

Options :

A : User Centric: Choice, Collection Limitation, Access and Correction Organization Centric: Notice, Use Limitation, Security, Disclosure to third party, Accountability

B : User Centric: Notice, Consent, Collection Limitation, Access and Correction Organization Centric: Choice, Use Limitation, Security, Disclosure to third party, Openness, Accountability

C : User Centric: Notice, Openness, Accountability Organization Centric: Consent, Choice, Collection Limitation, Use Limitation, Security, Disclosure to third party, Access & Correction

D : User Centric: Notice, Consent, Choice, Access & Correction Organization Centric: Consent, Collection Limitation, Use Limitation, Security, Disclosure to third party, Openness, Accountability

Answer: B

Question 3

Which of the following instruments can be used for a legal data transfer when a company in the EU wishes to transfer data to Asian countries?

Options :

A : Framework for the Privacy Shield

B : Standard Contractual Clauses

C : Data processors must be certified by ISO 27001 under customized contracts

D : Binding Corporate Rules

Answer: B,D

Question 4

Under which of the following conditions can a company in India may transfer sensitive personal information (SPI) to any other company or a person in India, or located in any other country?

Options :

A : Transfer of information is allowed to those who ensure the same level of data protection that is adhered to by the company as provided for under the Indian laws

B : The transfer of information is allowed only after taking approval of Chief Information Commissioner of India

C : The transfer of information is allowed only after taking approval of DeitY (Department of Electronics & Information Technology) in India

D : The transfer may be allowed only if it is necessary for the performance of the lawful contract or where the data subject has consented to data transfer

Answer: A

Question 5

Rising economic value of personal information has stressed the need for a comprehensive __________ legislation in India.

Options :

A : Right to Internet

B : Privacy

C : Right to Information

D : Dispute resolution

Answer: A

Free DCPP-01 Mock Exam – Practice Online Confidently

Buying Options: