Question 1

The Information Technology (Reasonable Security Practices And Procedures and Sensitive Data or

Information) Rules, 2011 incorporate which of the following privacy concepts and principles:

i. Collection Limitation

ii. Accountability

iii. Right to be forgotten

iv. Purpose Limitation

v. Access and correction

Options :

A : i, ii, iii and iv

B : I, ii, iv and v

C : I, iii, iv and v

D : All the above

Answer: B

Question 2

Which of the following provides the legal basis for an Adjudicating Officer in every Indian state & union territory, with the powers of a civil court, to hear complaints and order compensation to the affected individuals?

Options :

A : Indian Civil Code

B : Indian Criminal Procedure Code

C : Telecom Regulatory Authority of India (TRAI) Act

D : Information Technology Act, 2000 & Information Technology (Amendment) Act, 2008

Answer: A

Question 3

In June 2018, which US State passed a citizen proposed Consumer Privacy Act?

Options :

A : California

B : Texas

C : Iowa

D : Florida

Answer: A

Question 4

Under GDPR, the European Commission takes the adequacy decision in relation to privacy laws in a third country, territory, sector etc. A subjective approach is taken. For the assessment of whether a third country, a territory, or one or more specific sectors within that third country, or an international organization has an adequate level of protection, who is required to provide an opinion to the Commission?

Options :

A : European Data Protection Board

B : Lead Supervisory Authority

C : Article 29 Working Party

D : Convention 108 Council

Answer: A

Question 5

Data processing includes which of the following operations:

Options :

A : Collecting

B : Transmitting

C : Storing

D : Disclosing

E : All of the above

Answer: C