DSCI certified Privacy Professional (DCPP) (DCPP-01) Free Practice Test

Question 1

XYZ & Co., an Indian hospital specialized in dealing with cancer treatment has organized a free health checkup camp for women in a specific district, after seeking due permission from competent authorities. During the camp the hospital staffs will be feeding the medical records of these women into the computer connected to hospital network system. Does the said hospital need to notify its privacy policy to the women attending the camp and seek their consent regarding the collection and processing of such information?

A. No, since it is a free checkup camp for their welfare

B. Yes, in the any language as per the wishes of said hospital

C. No, since the law does not require the same in this case

D. Yes, in the language such women would understand

Correct Answer: B

Question 2

If XYZ & Co. collects, stores and processes personal information of living persons, electronically in a structured filing system, then XYZ could be a:

A. Data Subject

B. Either A or B

C. Data Controller

D. Data Processor

Correct Answer: C

Question 3

From the below listed options, identify the new privacy principle that is being advocated in proposed EU General Data Protection Regulation?

A. Right to object data collection and processing

B. Right to modify data

C. Right to be informed prior to sharing of data

D. Right to be forgotten

Correct Answer: D

Question 4

Please select the incorrect statement in context of "Online Privacy":

A. A person's concern on the software licensing agreement they sign with any organization

B. A person's control over collection of information during an online activity

C. A person's act of 'Selective disclosure" (of themselves) in an online environment

D. A person's concern over usage of information that were collected during an online activity

Correct Answer: B

Question 5

After the rules were notified under section 43A of the IT (Amendment) Act, 2008, a clarification was issued by the government which exempted the service providers, which get access to/processes Sensitive Personal Data or information (SPDI) under contractual agreement with a legal entity located within or outside Indi a. Which privacy principle provisions notified under Sec 43A were exempted for the service providers?

A. Disclosure of information

B. Access and Correction

C. Consent

D. Privacy policy (which is published)

Correct Answer: C

Question 6

A country should allow its citizens to access specific information owned by the government in order to bring transparency in the government administration processes. This is the basis for formulation of which of the following rights in India?

A. Right to Information Act

B. Right to Privacy Act

C. Right to Freedom of Speech and Expression

D. Right to Social Security

Correct Answer: A

Question 7

Companies based in EU and willing to transfer data outside the EU/EEA, use model contracts as an instrument. Which of the following statements are true in reference to above statement?

A. None of the above

B. It is a requirement mentioned in the OECD Privacy Framework

C. It is a requirement mentioned in the EU E-Commerce Directive

D. It is a requirement mentioned in EU Data Protection Directive

Correct Answer: A

Welcome to TestSimulate

DSCI certified Privacy Professional (DCPP) (DCPP-01) Free Practice Test