Question 1

Health insurance firm based in the US uses BPM services provided by an Indian company. It was found that one of the employees of the Indian company exported customer data of the insurance company to another US-based insurance company. Under which of the below ground, the company and its executives in India were also subjected to legal action ?

Options :

A : These actions were not avoided by using data loss prevention tools.

B : No reasonable security practices were implemented to protect data.

C : Employees of the company were allowed to view sensitive personal information.

D : Background checks were not conducted on the individuals.

Answer: B

Question 2

Which US Federal Law lays the framework for provision of data stored on servers outside US territory?

Options :

A : Clarifying Lawful Overseas Use of Data Act, 2018

B : Compelling Lawful Overseas Use of Data Act, 2018

C : Overseas Lawful Data Corporation Act, 2018

D : Remote Lawful Overseas Use of Data Act, 2016

Answer: A

Question 3

In June 2018, which US State passed a citizen proposed Consumer Privacy Act?

Options :

A : California

B : Texas

C : Iowa

D : Florida

Answer: A

Question 4

From the following list, identify the technology aspects that are specially designed for upholding the privacy:

i. Data minimization

ii. Intrusion prevention system

iii. Data scrambling

iv. Data loss prevention

v. Data portability

vi. Data obfuscation

vii. Data encryption

viii. Data mirroring

Please select the correct set of aspects from below options

Options :

A : Only i., iii., vii. and viii

B : Only i., ii., iii., vii. and viii

C : Only i., ii., vi. and vii

D : Only ii., v., vi., vii. and viii

Answer: C

Question 5

Under which of the following conditions can a company in India may transfer sensitive personal information (SPI) to any other company or a person in India, or located in any other country?

Options :

A : Transfer of information is allowed to those who ensure the same level of data protection that is adhered to by the company as provided for under the Indian laws

B : The transfer of information is allowed only after taking approval of Chief Information Commissioner of India

C : The transfer of information is allowed only after taking approval of DeitY (Department of Electronics & Information Technology) in India

D : The transfer may be allowed only if it is necessary for the performance of the lawful contract or where the data subject has consented to data transfer

Answer: A