APEC privacy framework envisages common principles such as Notice, Collection limitation, Use Limitation, Access and Correction, Security/Safeguards, and Accountability. But it differs from the EU Data Protection Directive in which of the below aspect?

• A.APEC privacy framework does not deal with the usage of personal information
• B.APEC privacy framework does not mandate the binding treaties or directives for member countries
• C.APEC privacy framework does not have a provision for co-operation between privacy enforcement agencies of members
• D.APEC privacy framework does not deal with e-commerce

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements is true in respect of the India specific government projects such as
Aadhaar, National Population Register (NPR), etc. that can have privacy implications?

• A.Collection of biometrics in India is a statutory requirement
• B.Data subjects are not limited in their ability to exercise control over the ways their personal information
  is being used, once it has been shared by them as part of the projects
• C.Citizens are being given the choice to opt out from submitting their biometric details and are allowed to
  complete the environment without submitting their biometrics
• D.Proper and adequate notification is not provided to data subjects before and during the collection of
  their personal information

Comment: *

Name: *

Email: *

Verification: *

Regarding the "Data Minimization" principle, please select the correct statement from the following:

• A.Limiting the amount of data collected for specific purposes
• B.The purpose of data collection is to analyze and minimize it into useful information.
• C.Retaining collected data as long as necessary to achieve purposes
• D.Objecting to the collection of personal information by the data subject

Comment: *

Name: *

Email: *

Verification: *

Regarding projects such as Aadhaar, the National Population Register (NPR), etc. that involve national government projects specific to India, which of the following statements is accurate?

• A.Citizens can choose not to submit their biometric details to the environment and can complete the process without providing their biometrics
• B.Prior to and during collection of data, data subjects are not properly notified
• C.In India, biometric data collection is a statutory requirement
• D.Once their personal information has been shared with the project, data subjects are not limited in how they can exercise control over how it will be used

Comment: *

Name: *

Email: *

Verification: *

A global Business Process Management (BPM) organization based in India, headquartered in the US is in receipt of a Request for Proposal (RFP) for a potential deal. The privacy function in this company has just got formulated.
Which of the following stage would be most effective for sales team to involve privacy function?

• A.RFP response stage
• B.Post-RFP stage once the BPM organization is selected as one of the potential service providers
• C.During service provider evaluation stage based on RFP response, and face-to-face reviews of the service provider
• D.During contract negotiation stage

Comment: *

Name: *

Email: *

Verification: *