Dsci Certified Privacy Professional Free Sample Questions

A hospital is digitizing its patient records. The privacy architect needs to decide on a technology to protect patient data stored in the database, such that data analysts can run queries on trends and statistics without accessing individually identifiable health information. The chosen method must irreversibly prevent the re-identification of any single patient from the dataset. Which Privacy Enhancing Technology (PET) should be used?

APEC privacy framework envisages common principles such as Notice, Collection limitation, Use Limitation, Access and Correction, Security/Safeguards, and Accountability. But it differs from the EU Data Protection Directive in which of the below aspect? A.APEC privacy framework does not deal with the usage of personal informationB.APEC privacy framework does not mandate the binding treaties or directives for member countriesC.APEC privacy framework does not have a provision for co-operation between privacy enforcement agencies of membersD.APEC privacy framework does not deal with e-commerce

A multinational company with operations in several parts within EU and outside EU, involves international data transfer of both its employees and customers. In some of its EU branches, which are relatively larger in size, the organization has a works council. Most of the data transferred is personal, and some of the data that the organization collects is sensitive in nature, the processing of some of which is also outsourced to its branches in Asian countries.Which of the following are not mandatory pre-requisite before transferring sensitive personal data to its Asian branches?

A multinational company with operations in several parts within EU and outside EU, involves international data transfer of both its employees and customers. In some of its EU branches, which are relatively larger in size, the organization has a works council. Most of the data transferred is personal, and some of the data that the organization collects is sensitive in nature, the processing of some of which is also outsourced to its branches in Asian countries.For exporting EU branch employees’ data to Asian Countries for processing, which of the following instruments could be used for legal data transfer? A.Customized contracts mandating ISO 27001 certification by the data processorB.Standard Contractual ClausesC.Binding Corporate RulesD.Privacy Shield Framework