Which of the following statements is true with respect to organization's privacy training and awareness program?

• A.None of the above
• B.Should necessarily cover official from Law Enforcement Agencies that request lawful access to personal information
• C.Should cover employees of service provider dealing with personal information
• D.Should define roles and responsibilities of personnel in privacy function

Comment: *

Name: *

Email: *

Verification: *

Which of the following legislations/ guidelines do not cover the concept of trans-border data flow?

• A.None of the above
• B.OECD
• C.IT (Amendment) Act, 2008
• D.PIPEDA

Comment: *

Name: *

Email: *

Verification: *

Which of the following is not required by an organization in US, resorting to EU-US Safe Harbor provisions, to transfer personal information from EU member nation to US?

• A.Adherence to the seven safe harbor principles
• B.Disclose their privacy policy publicly
• C.Sign standard contractual clauses with data exporters in EU
• D.Notify FTC of the self-certification

Comment: *

Name: *

Email: *

Verification: *

Which of the following could be considered as the most beneficial aspect of implementing Privacy Enhancing Technologies or Tools (PETs)?

• A.Improves the quality of the information.
• B.Reduces audit, supervisory and management costs.
• C.Increases users' control over their personal data.
• D.Ensures security by design in all products and services.

Comment: *

Name: *

Email: *

Verification: *

Which of the following factor is least likely to be considered while implementing or augmenting data security
solution for privacy protection:

• A.Security controls deployment at the database level
• B.Training and awareness program for third party organizations
• C.Information security infrastructure up-gradation in the organization
• D.Classification of data type and its usage by various functions in the organization

Comment: *

Name: *

Email: *

Verification: *