Quiz: Data Privacy Training

1. What is the main purpose of the Transparency and Legal Basis to Collect Data principle?

A

Data must be stored on organization premises

B

Data must be collected for legitimate business purposes

C

Data must be processed and transferred efficiently

D

Data must be disposed when not required

2. Which of the following is considered to be under Biometric Information regarding one's personal information?

A

Name

B

Favorite animal

C

GPS Location

D

Eye colour

3. Among which of the following is/ are examples of PII information?

A

A full name

B

A social security number

C

A physical address

D

All of the above

4. Which of the following describes the definition of Personal Information?

A

Any information relating to an identified or identifiable person

B

Any information that contains financial information pertaining to an organisation, individual or asset

C

Any information that describes the actions of a person(s)

D

None of the above

5. What is the main purpose of the Choice principle?

A

Reasonable security measures are required to protect personal information

B

Internal controls and measures to ensure privacy compliance

C

Customers should have the right to access and delete personal information

D

Customers should be given meaningful choices about the collection, use and sharing of their personal information

6. When a data subject provides input to a form on a website, the form should NOT detail why the data is needed, to whom it will be shared with and how long it will be retained.

A

True

B

False

7. Under the Purpose Limitation principle, which of the following is a recommended practice under this principle?

A

A company must provide new notice and/or consent if it plans to use the data for a different purpose

B

The purposes and use of collected data should not be disclosed to the customer/user

C

A company need not share any future uses of collected data if they are not compatible with its original purpose for collection

D

The use of the data collected does not necessarily have to follow its disclosed purpose

8. What is the main purpose of the Accountability principle?

A

Customers should have the right to access and delete personal information

B

Reasonable security measures should be put in place to protect personal information

C

Establish internal controls and measures to ensure privacy compliance

D

None of the above

9. Under the Data minimisation, retention, and de-identification principle, how long should data be stored?

A

It should be retained no longer than is necessary for the specified legitimate business purposes

B

It should not be kept for a specified period of time that is disclosed to the user

C

It should be kept longer than intended or longer than the period specified to the data subject

D

All of the above

10. What is a basic difference between data privacy and data security?

A

Data privacy means personal information and data security refers to the process of protecting data

B

Data privacy refers to the process of protecting data and data security means personal information

C

Both A and B

D

None of the above mentioned