Question 1

Choose from the options below to group privacy principles into user centric (requiring people's involvement) and organization centric (restricted to processes within the organization) categories:

Options :

A : User Centric: Choice, Collection Limitation, Access and Correction Organization Centric: Notice, Use Limitation, Security, Disclosure to third party, Accountability

B : User Centric: Notice, Consent, Collection Limitation, Access and Correction Organization Centric: Choice, Use Limitation, Security, Disclosure to third party, Openness, Accountability

C : User Centric: Notice, Openness, Accountability Organization Centric: Consent, Choice, Collection Limitation, Use Limitation, Security, Disclosure to third party, Access & Correction

D : User Centric: Notice, Consent, Choice, Access & Correction Organization Centric: Consent, Collection Limitation, Use Limitation, Security, Disclosure to third party, Openness, Accountability

Answer: B

Question 2

Which of the following applies to the HIPAA Omnibus rule as of 2013?

Options :

A : Federal Health Bodies only

B : Business Associates only

C : Covered Entities only

Answer: B,C

Question 3

A newly appointed Data Protection officer is reviewing the organization’s existing privacy policy. Which of the following would be the most critical factor for the review process?

Options :

A : Awareness of the business units about the privacy policy

B : Changes in the legal/regulatory regime

C : Privacy policies of industry peers

D : Foreseeable challenges in the effective implementation of the policy

Answer: D

Question 4

Which of the following instruments can be used for a legal data transfer when a company in the EU wishes to transfer data to Asian countries?

Options :

A : Framework for the Privacy Shield

B : Standard Contractual Clauses

C : Data processors must be certified by ISO 27001 under customized contracts

D : Binding Corporate Rules

Answer: B,D

Question 5

Which US Federal Law lays the framework for provision of data stored on servers outside US territory?

Options :

A : Clarifying Lawful Overseas Use of Data Act, 2018

B : Compelling Lawful Overseas Use of Data Act, 2018

C : Overseas Lawful Data Corporation Act, 2018

D : Remote Lawful Overseas Use of Data Act, 2016

Answer: A