DSCI DCPP-01 dumps - 100% Pass Guarantee!

With reference to APEC privacy framework, which of the following statements are true?

A. The APEC Privacy Framework is intended to promote a flexible approach to information privacy protection across APEC members, while at the same time avoiding the creation of needless barriers to information flows.

B. The APEC framework is detailed and prescribes stringent controls that need to be implemented for trans-border data flows to initiate.

C. Companies can be certified by attested third parties for compliance to requirements mentioned under APEC Privacy Framework.

D. Governments which are part of the APEC, authorize data transfer as per APEC privacy framework.

Choose the correct grouping of privacy principles into user centric (requiring data subjects' involvement) and organization centric (confined to organization processes and procedures) from the following options:

A. User Centric: Notice, Consent, Collection Limitation, Access and Correction Organization Centric: Choice, Use Limitation, Security, Disclosure to third party, Openness, Accountability

B. User Centric: Consent, Choice, Collection Limitation, Access and Correction Organization Centric: Notice, Use Limitation, Security, Disclosure to third party, Openness,

Accountability

C. User Centric: Notice, Consent, Choice, Access and Correction Organization Centric: Collection Limitation, Use Limitation, Security, Disclosure to third party, Openness, Accountability

D. User Centric: Notice, Consent, Openness, Accountability Organization Centric: Choice, Collection Limitation, Use Limitation, Security, Disclosure to third party, Access and Correction

If XYZ and Co. collects, stores and processes personal information of living persons, electronically in a structured filing system, then XYZ could be a:

A. Data Processor

B. Data Controller

C. Data Subject

D. Either A or B

As a newly-appointed Data Protection officer of an IT company gearing up for DSCI's privacy certification, you are trying to understand what data elements are involved in each of the business process, function and if these data elements can be classified as sensitive personal information.

What is being accomplished with this effort?

A. Organization to get "Visibility" over its exposure to sensitive personal information

B. It is a part of the annual exercise per the organization's privacy policy/ processes

C. Information security controls for confidential information being reviewed

D. Gathering inputs to restructure privacy function

As a privacy lead assessor assessing the company for DSCI's privacy certification, you are assessing the adequacy of resources and skills in the organization, to address privacy related responsibilities.

Which DSCI Privacy Framework (DPF? practice area is relevant?

A. Visibility over Personal Information (VPI)

B. Privacy Organization and Relationship (POR)

C. Privacy Awareness and Training (PAT)

D. Information Usage and Access (IUA)