DSCI DCPP-01 Exam Questions Instant Access

Question 1

Company A collects and stores information from people X & Y on behalf of company B. Which of the following statements are true?

AA is the data controller since it collects data directly from X & Y

BB is the data controller while A is the sub processor as B has outsourced the data collection and processing to A

CB is the data controller that uses A as data processor to collect and process data of data subjects X and Y

DBoth A & B are data controllers since both need to maintain highest principles of data protection

Answer : C

Question 2

Companies based in EU and willing to transfer data outside the EU/EEA, use model contracts as an instrument. Which of the following statements are true in reference to above statement?

AIt is a requirement mentioned in EU Data Protection Directive

BIt is a requirement mentioned in the OECD Privacy Framework

CIt is a requirement mentioned in the EU E-Commerce Directive

DNone of the above

Answer : D

Question 3

Which of the following statements are true about the privacy statement of an organization?

AContent of the online privacy statement of an organization will depend upon the applicable laws, and may need to address requirements across geographical boundaries and legal jurisdictions

BAs per privacy laws generally it is mandatory to mention the phone contact details of the owner of organization in the online privacy statement where customers can reach out in case of a grievance or incident

COnline privacy statement is an instrument to demonstrate to stakeholders how the organization gathers, uses, discloses, and manages personal data

DIndia's Information Technology (Amendment) Act, 2008 does not require that privacy policy be published on the website

Answer : A

Question 4

When you're based in the EU and willing to share data outside the EU/EEA, then you can use model contracts. In reference to the above statement, which of the following is true?

ADirective on EU e-commerce mentions it as a requirement

BEU Data Protection Directive states that it is a requirement

COECD's Privacy Framework mentions it as a requirement

DNeither of the above

Answer : B

Question 5

How does the APEC privacy framework differ from the EU Data Protection Directive in the following way?

AAs part of APEC, member countries do not need to sign binding treaties or directives on privacy

BPersonal information is not covered by the APEC privacy framework

CMembers of APEC do not cooperate with each other in the enforcement of privacy laws

DAPEC provides no regulations on e-commerce

Answer : A

EU binds treaties but not APEC.

Question 6

If XYZ & Co. collects, stores and processes personal information of living persons, electronically in a structured filing system, then XYZ could be a:

AData Processor

BData Controller

CData Subject

DEither A or B

Answer : B

Question 7

'Challenging Compliance' as a privacy principle is covered in which of the following data protection/ privacy act?

AFederal Data Protection Act, Germany

BUK Data Protection Act

CPIPEDA

DSingapore Data Protection Act

Answer : C

DSCI Certified Privacy Professional DCPP-01 Exam Questions