Online Access Free DCPP-01 Practice Test

XYZ & Co., an Indian hospital specialized in dealing with cancer treatment has organized a free health checkup camp for women in a specific district, after seeking due permission from competent authorities. During the camp the hospital staffs will be feeding the medical records of these women into the computer connected to hospital network system. Does the said hospital need to notify its privacy policy to the women attending the camp and seek their consent regarding the collection and processing of such information?

• A.No, since the law does not require the same in this case
• B.No, since it is a free checkup camp for their welfare
• C.Yes, in the language such women would understand
• D.Yes, in the any language as per the wishes of said hospital

According to the EU, which of the following steps is not relevant when transferring data from an EU member to a third country that does not meet EU standards?

• A.Aligning data protection legislation across geographies
• B.Obtaining approval by the Data Protection Authority or informing it
• C.Sizing up the security measures employed by the importing organization to account for the sensitivity of the data being transferred
• D.A model contract is signed

From the following list, identify the technology aspects that are specially designed for upholding the privacy:
i. Data minimization
ii. Intrusion prevention system
iii. Data scrambling
iv. Data loss prevention
v. Data portability
vi. Data obfuscation
vii. Data encryption
viii. Data mirroring
Please select the correct set of aspects from below options:

• A.Only i., ii., iii., vii. and viii
• B.Only i., ii., vi. and vii
• C.Only i., iii., vii. and viii
• D.Only ii., v., vi., vii. and viii

According to the privacy statement of an organization, which of the following words is true?

• A.In order to follow privacy laws, it is mandatory that there is a phone contact information for the organization's owner in the online privacy statement so that customers can reach out in case of a concern or incident, which can be managed online
• B.A privacy statement demonstrates to stakeholders how an organization gathers, uses, discloses, and manages personal information
• C.The Information Technology (Amendment) Act, 2008 does not require the publication of privacy policies on websites in India
• D.The content of an organization's online privacy statement will be influenced by the applicable laws, and may need to address requirements across geographic boundaries and legal jurisdictions

Under GDPR, the European Commission takes the adequacy decision in relation to privacy laws in a third country, territory, sector etc. A subjective approach is taken. For the assessment of whether a third country, a territory, or one or more specific sectors within that third country, or an international organization has an adequate level of protection, who is required to provide an opinion to the Commission?

• A.Convention 108 Council
• B.Lead Supervisory Authority
• C.Article 29 Working Party
• D.European Data Protection Board