DSCI certified Privacy Professional (DCPP): DCPP-01

For negligence in implementing and maintaining the reasonable security practices and procedures for protecting Sensitive Personal Data or Information (SPDI) as mentioned in Section 43A and associated rules under IT (Amendment) Act, 2008, a corporate entity may be liable to pay compensation of up to___________

A. Rs. 50,000,000

B. Rs. 500,000,000

C. Rs. 5,000,000

D. Upper limit not defined

Choose the correct grouping of privacy principles into user centric (requiring data subjects' involvement) and organization centric (confined to organization processes and procedures) from the following options:

A. User Centric: Notice, Consent, Collection Limitation, Access and Correction Organization Centric: Choice, Use Limitation, Security, Disclosure to third party, Openness, Accountability

B. User Centric: Consent, Choice, Collection Limitation, Access and Correction Organization Centric: Notice, Use Limitation, Security, Disclosure to third party, Openness,

Accountability

C. User Centric: Notice, Consent, Choice, Access and Correction Organization Centric: Collection Limitation, Use Limitation, Security, Disclosure to third party, Openness, Accountability

D. User Centric: Notice, Consent, Openness, Accountability Organization Centric: Choice, Collection Limitation, Use Limitation, Security, Disclosure to third party, Access and Correction

Which of the following should be the part of the Privacy Policy of any organization?

A. Applicable Privacy Principles

B. Contact details of senior management

C. Definition of Personal Information and associated categories

D. Details of all the privacy incidents that have occurred in the past