Question 1

Rising economic value of personal information has stressed the need for a comprehensive __________ legislation in India.

Options :

A : Right to Internet

B : Privacy

C : Right to Information

D : Dispute resolution

Answer: A

Question 2

Data processing includes which of the following operations:

Options :

A : Collecting

B : Transmitting

C : Storing

D : Disclosing

E : All of the above

Answer: C

Question 3

Under which of the following conditions can a company in India may transfer sensitive personal information (SPI) to any other company or a person in India, or located in any other country?

Options :

A : Transfer of information is allowed to those who ensure the same level of data protection that is adhered to by the company as provided for under the Indian laws

B : The transfer of information is allowed only after taking approval of Chief Information Commissioner of India

C : The transfer of information is allowed only after taking approval of DeitY (Department of Electronics & Information Technology) in India

D : The transfer may be allowed only if it is necessary for the performance of the lawful contract or where the data subject has consented to data transfer

Answer: A

Question 4

Health insurance firm based in the US uses BPM services provided by an Indian company. It was found that one of the employees of the Indian company exported customer data of the insurance company to another US-based insurance company. Under which of the below ground, the company and its executives in India were also subjected to legal action ?

Options :

A : These actions were not avoided by using data loss prevention tools.

B : No reasonable security practices were implemented to protect data.

C : Employees of the company were allowed to view sensitive personal information.

D : Background checks were not conducted on the individuals.

Answer: B

Question 5

Which of the following instruments can be used for a legal data transfer when a company in the EU wishes to transfer data to Asian countries?

Options :

A : Framework for the Privacy Shield

B : Standard Contractual Clauses

C : Data processors must be certified by ISO 27001 under customized contracts

D : Binding Corporate Rules

Answer: B,D