DSCI DCPP-01 Exam - Topic 1 Question 36 Discussion

Actual exam question for DSCI's DCPP-01 exam

Question #: 36
Topic #: 1

[All DCPP-01 Questions]

With respect to privacy notice, what are the responsibilities of data controller?

AProviding the notice before or during data collection

BIdentifying and communication the purposes for which data will be collected, used, and disclosed

CProviding notice after the data collection

DProviding notice at every instance of data processing

Show Suggested Answer

Suggested Answer: D

There are two sections under the IT (Amendment) Act, 2008 that outline liabilities. These are quoted below: Sec 43A - ''Where a body corporate possessing, dealing or handling any sensitive personal data or information in a computer resource which it owns, controls or operates, is negligent in implementing and maintaining reasonable security practices and procedures and thereby causes wrongful loss or wrongful gain to any person, such body corporate shall be liable to pay damages by way of compensation to the person so affected.'' Compensation for failure to implement reasonable security practices can be upto Rs. 5 Crores (the Adjudicating Officer has the power to award this). A data subject can further approach a civil court if compensation desired is more than Rs. 5 Crore. Sec 72A - ''Save as otherwise provided in this Act or any other law for the time being in force, any person including an intermediary who, while providing services under the terms of lawful contract, has secured access to any material containing personal information about another person, with the intent to cause or knowing that he is likely to cause wrongful loss or wrongful gain discloses, without the consent of the person concerned, or in breach of a lawful contract, such material to any other person, shall be punished with imprisonment for a term which may extend to three years, or with fine which may extend to five lakh rupees, or with both.''

by Marguerita at Oct 21, 2023, 09:35 PM

Limited Time Offer

25%

Off

Get Premium DCPP-01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Aileen

3 months ago

Wait, are we sure about all these responsibilities?

upvoted 0 times

...

Howard

3 months ago

D? Really? That sounds excessive.

upvoted 0 times

...

Larue

3 months ago

C seems wrong, notice should be upfront!

upvoted 0 times

...

Trina

4 months ago

B is crucial too, can't skip that.

upvoted 0 times

...

Bea

4 months ago

A is definitely a must!

upvoted 0 times

...

Twana

4 months ago

I vaguely remember something about providing notice at every instance of data processing, but that sounds a bit excessive.

upvoted 0 times

...

Talia

4 months ago

I feel like providing notice after data collection doesn't really make sense, but I can't recall if it's mentioned in the regulations.

upvoted 0 times

...

Charolette

4 months ago

I think identifying the purposes for data collection is also important, but I'm not sure if it's the primary responsibility.

upvoted 0 times

...

Marvel

5 months ago

I remember that the data controller has to provide the notice before or during data collection, right? That seems crucial.

upvoted 0 times

...

Josefa

5 months ago

Wait, I'm confused. Is the controller supposed to provide notice after collection, or at every instance of processing? I need to review this topic again to make sure I have the right approach.

upvoted 0 times

...

Alline

5 months ago

Okay, let me see. The key responsibilities of data controllers for privacy notices are providing the notice before or during data collection, and identifying the purposes for data use and disclosure. I think I've got this covered.

upvoted 0 times

...

Sage

5 months ago

Hmm, I'm a bit unsure about this one. I know data controllers have some obligations around privacy notices, but I can't quite recall the specifics. I'll have to think this through carefully.

upvoted 0 times

...

Ardella

5 months ago

This seems like a straightforward question about data controller responsibilities. I'm pretty confident I can answer this based on my understanding of privacy notice requirements.

upvoted 0 times

...

Carlota

5 months ago

Okay, I've got this. The technical specification would include things like the hardware, software, and performance requirements. "Very low image capture rate" doesn't sound like it would be part of that, so I'll go with that as the answer.

upvoted 0 times

...

Miles

5 months ago

Okay, I've got this. The correct answer is D, ldappasswd. I'm confident in that because we covered LDAP password management in detail during the last module.

upvoted 0 times

...

Emmett

5 months ago

Hmm, this is a tricky one. I'll need to carefully read through the options and think about the implications of each.

upvoted 0 times

...

Lovetta

5 months ago

I think the answer might be "vicarious liability," but I'm not completely sure if that's what they mean by the master's responsibility.

upvoted 0 times

...

Fannie

9 months ago

Ha! Providing notice 'at every instance of data processing'? That would be like an endless stream of privacy notifications. No one would read them anyway.

upvoted 0 times

...

Ronnie

10 months ago

D? Seriously? Providing notice at every instance of data processing seems a bit excessive. I doubt that's the correct answer.

upvoted 0 times

Javier

8 months ago

C) Providing notice after the data collection

upvoted 0 times

...

Shawnee

8 months ago

B) Identifying and communication the purposes for which data will be collected, used, and disclosed

upvoted 0 times

...

Buck

9 months ago

A) Providing the notice before or during data collection

upvoted 0 times

...

Juliana

10 months ago

I'd go with A. Providing the notice before or during data collection is the best way to ensure individuals are informed about how their data will be used.

upvoted 0 times

Mariann

8 months ago

A) Providing the notice before or during data collection

upvoted 0 times

...

Lenny

9 months ago

B) Identifying and communication the purposes for which data will be collected, used, and disclosed

upvoted 0 times

...

Jospeh

9 months ago

A) Providing the notice before or during data collection

upvoted 0 times

...

Tayna

10 months ago

Option B seems like the most comprehensive and appropriate response. Clearly communicating the purposes of data collection and use is crucial for transparency and compliance.

upvoted 0 times