Question 1

Which of the following instruments can be used for a legal data transfer when a company in the EU wishes to transfer data to Asian countries?

Options :

A : Framework for the Privacy Shield

B : Standard Contractual Clauses

C : Data processors must be certified by ISO 27001 under customized contracts

D : Binding Corporate Rules

Answer: B,D

Question 2

Choose from the options below to group privacy principles into user centric (requiring people's involvement) and organization centric (restricted to processes within the organization) categories:

Options :

A : User Centric: Choice, Collection Limitation, Access and Correction Organization Centric: Notice, Use Limitation, Security, Disclosure to third party, Accountability

B : User Centric: Notice, Consent, Collection Limitation, Access and Correction Organization Centric: Choice, Use Limitation, Security, Disclosure to third party, Openness, Accountability

C : User Centric: Notice, Openness, Accountability Organization Centric: Consent, Choice, Collection Limitation, Use Limitation, Security, Disclosure to third party, Access & Correction

D : User Centric: Notice, Consent, Choice, Access & Correction Organization Centric: Consent, Collection Limitation, Use Limitation, Security, Disclosure to third party, Openness, Accountability

Answer: B

Question 3

The Information Technology (Reasonable Security Practices And Procedures and Sensitive Data or

Information) Rules, 2011 incorporate which of the following privacy concepts and principles:

i. Collection Limitation

ii. Accountability

iii. Right to be forgotten

iv. Purpose Limitation

v. Access and correction

Options :

A : i, ii, iii and iv

B : I, ii, iv and v

C : I, iii, iv and v

D : All the above

Answer: B

Question 4

Which of the following is not a driver for increased privacy-related concerns and subsequent regulatory responses from various governments around the world?

Options :

A : Outsourcing and trans-border data flows in globalized world

B : Increasing economic value of personal information

C : Rising demand of data privacy professionals

D : Phenomenal rise in use of social networking sites, where a lot of personal information is shared with others

Answer: D

Question 5

Which of the following provides the legal basis for an Adjudicating Officer in every Indian state & union territory, with the powers of a civil court, to hear complaints and order compensation to the affected individuals?

Options :

A : Indian Civil Code

B : Indian Criminal Procedure Code

C : Telecom Regulatory Authority of India (TRAI) Act

D : Information Technology Act, 2000 & Information Technology (Amendment) Act, 2008

Answer: A