Quiz: Data Privacy

1. What is the main purpose of the Transparency and Legal Basis to Collect Data principle?

A

Data must be stored on organization premises

B

Data must be collected for legitimate business purposes

C

Data must be processed and transferred efficiently

D

Data must be disposed when not required

2. Which of the following is considered to be under Biometric Information regarding one's personal information?

A

Name

B

Favorite animal

C

GPS Location

D

Eye colour

3. What is the main purpose of the Choice principle?

A

Reasonable security measures are required to protect personal information

B

Internal controls and measures to ensure privacy compliance

C

Customers should have the right to access and delete personal information

D

Customers should be given meaningful choices about the collection, use and sharing of their personal information

4. When vehicle location data is collected from a customer, which of the following is a good practice when handling the personal information?

A

Disclose all current and future uses for the data

B

Sell the data to third-party vendors

C

Ensure that the data collected is shared with the public

5. Which of the following describes the fundamentals of EU's Privacy Policies?

A

Primarily opt-out, allows bundling, FTC is the most relevant regulator

B

Primarily opt-in, against bundling, "One-stop shop" concept under GDPR for privacy regulators

C

None of the above

6. When a data subject provides input to a form on a website, the form should NOT detail why the data is needed, to whom it will be shared with and how long it will be retained.

A

True

B

False

7. Under the Purpose Limitation principle, which of the following is a recommended practice under this principle?

A

A company must provide new notice and/or consent if it plans to use the data for a different purpose

B

The purposes and use of collected data should not be disclosed to the customer/user

C

A company need not share any future uses of collected data if they are not compatible with its original purpose for collection

D

The use of the data collected does not necessarily have to follow its disclosed purpose

8. Which of the following describes the definition of Personal Information?

A

Any information relating to an identified or identifiable person

B

Any information that contains financial information pertaining to an organisation, individual or asset

C

Any information that describes the actions of a person(s)

D

None of the above

9. What is the main purpose of the Accountability principle?

A

Customers should have the right to access and delete personal information

B

Reasonable security measures should be put in place to protect personal information

C

Establish internal controls and measures to ensure privacy compliance

D

None of the above

10. Under the Data minimisation, retention, and de-identification principle, how long should data be stored?

A

It should be retained no longer than is necessary for the specified legitimate business purposes

B

It should not be kept for a specified period of time that is disclosed to the user

C

It should be kept longer than intended or longer than the period specified to the data subject

D

All of the above