1. A multinational company with operations in several parts within EU and outside EU, involves international data transfer of both its employees and customers. In some of its EU branches, which are relatively larger in size, the organization has a works council. Most of the data transferred is personal, and some of the data that the organization collects is sensitive in nature, the processing of some of which is also outsourced to its branches in Asian countries. Which of the following are not mandatory pre-requisite before transferring sensitive personal data to its Asian branches?

2. With reference to APEC privacy framework, when personal information is to be transferred to another person or organization, whether domestically or internationally,

3. Which of the following legislations/ guidelines do not cover the concept of trans-border data flow?

4. Which of the following privacy principle deals with informed consent of the data subject before sharing the personal information (of the data subject) to third parties for processing?

5. With respect to privacy monitoring and incident management process, which of the below should be a part of a standard incident handling process? I. Incident identification and notification II. Investigation and remediation III. Root cause analysis IV. User awareness training on how to report incidents Please select the correct option:

6. Which of the following does not fall under the category of Personal Financial Information (PFI)?

7. Under which of the following conditions can a company in India may transfer sensitive personal information (SPI) to any other company or a person in India, or located in any other country?

8. Which one of the following is considered as the first step of evolution in the formation of today

9. Which of the following laid foundation for the development of OECD privacy principles for the promotion of free international trade and trans border data flows?

10.

11. A US IT company has created a cloud based application for Canadian consumers only, with servers located in Vancouver, Canada. The application allows its users to publish their short stories, essays or e-books. The purpose of the application, i.e. literary work, is clearly stated in the terms and conditions which are mandatorily acknowledged by each user. With respect to this application, the company must ensure compliance with:

12. From the below listed options, identify the new privacy principle that is being advocated in proposed EU General Data Protection Regulation?

13. Which of the following doesn

14. A multinational company with operations in several parts within EU and outside EU, involves international data transfer of both its employees and customers. In some of its EU branches, which are relatively larger in size, the organization has a works council. Most of the data transferred is personal, and some of the data that the organization collects is sensitive in nature, the processing of some of which is also outsourced to its branches in Asian countries. For exporting EU branch employees

15. Company A collects and stores information from people X & Y on behalf of company B. Which of the following statements are true?

16. A ministry under government of India plans to collect citizens

17. In the history of human evolution, erection of walls and fences around one

18. Rising economic value of personal information has stressed the need for a comprehensive __________ legislation in India.

19. A company collects personal information about its employees and requests them to provide accurate information in order to avail benefits such as life insurance and medical insurance. Employees of the company have raised concerns about use of their personal information. Due to the concerns, the company has decided to create a privacy policy. What all should the company include in its privacy policy to address the raised concerns?

20. One of the main objectives of

21. Which of the following categories of information are generally protected under privacy laws?

22. Which among the following organizations does not issue a privacy seal?

23. Which of the following statements is true with respect to organization

24. A privacy assessor, what would most likely be the first artifact you would ask for while assessing an organization which claims that it has implemented a privacy program?

25. Which among the following is the Canadian privacy law?