Question 21

Which of the following privacy principle deals with informed consent of the data subject before sharing the
personal information (of the data subject) to third parties for processing?
  • Question 22

    A public domain or freely accessible piece of information cannot be construed as sensitive personal data or information under Indian law.
  • Question 23

    A US IT company has created a cloud based application for Canadian consumers only, with servers located in Vancouver, Canada. The application allows its users to publish their short stories, essays or e-books. The purpose of the application, i.e. literary work, is clearly stated in the terms and conditions which are mandatorily acknowledged by each user. With respect to this application, the company must ensure compliance with:
  • Question 24

    Which of the following aspects of personal information lifecycle management should the privacy function in an organization be concerned with i. Policy definition ii. Policy enforcement iii. IT infrastructure setup iv. Physical infrastructure setup Please select the correct option:
  • Question 25

    Which of the following mechanisms or steps are likely to be taken by an organization for implementing
    privacy program?
    i Deploying physical and technology safeguards to protect personal information assets
    ii. Privacy consideration in product and service design
    iii. Privacy implementation to focus only on projects impacted by privacy breaches
    iv. Benchmarking against industry peers' privacy implementation
    v. Installing privacy enhancing tools and technologies for the projects dealing with organization's intellectual
    property
    Please select the correct set of statements from the below options: