Which of the following does Singapore's PDPC NOT have the power to do?

Order an organization to pay a financial penalty to the government.

Order an organization to stop collecting personal data.

Order an organization to destroy collected personal data.

Order an organization to award compensation to a complainant.

Order an organization to pay a financial penalty to the government.

Under what circumstances are smart identity cards required of Hong Kong citizens?

When seeking government services.

When using public transit systems.

When seeking government services.

When making substantial purchases.

SCENARIO – Please use the following to answer the next question:Dracarys Inc. is a large multinational company with headquarters in Seattle, Washington, U.S.A. Dracarys began as a small company making and selling women's clothing, but rapidly grew through its early innovative use of online platforms to sell its products. Dracarys is now one of the biggest names in the industry, and employs staff across the globe, and in Asia has employees located in both Singapore and Hong Kong.Due to recent management restructuring they have decided, on the advice of external consultants, to open an office in India in order to centralize its call center as well as its internal human resource functions for the Asia region.Dracarys would like to centralize the following human resource functions in India:

Employee assessment and records management;

Employee benefits administration, including health insurance.Dracarys will have employees on the ground in India managing the systems for the functions listed above. They have been presented with a variety of vendor options for these systems, and are currently assessing the suitability of these vendors for their needs.The CEO of Dracarys is concerned about the behavior of her employees, especially online. After having proprietary company information being shared with competitors by former employees, she is eager to put certain measures in place to ensure that the activities of her employees, while on Dracarys' premises or when using any of Dracarys' computers and networks are not detrimental to the business.Dracarys' external consultants are also advising the company on how to increase earnings. Dracary's management refuses to reduce production costs and compromise the quality of their garments, so the consultants suggested utilizing customer data to create targeted advertising and thus increase sales.Which of the following guidelines does Dracarys NOT need to take into account when implementing monitoring and surveillance tools?

The Indian Information Technology Act of 2000.

The Hong Kong guide to monitoring personal data privacy at work.

The Hong Kong Code of Practice on Human Resource Management.

The Singapore advisory guidelines on the personal data protection act for selected topics (employment and CCTV).

Both Sections 72 and 72A of India's IT Act 2000 involve unauthorized access of personal information.One main difference between the sections is that 72A does what?

Specifies imprisonment as a possible penalty.

Stipulates that disclosure has to have occurred.

Specifies imprisonment as a possible penalty.

Adds a provision about wrongful loss or gain.

Includes the concept of consent.

What was the basis for the "TrustSg" mark, which was designed to build confidence in e-commerce transactions before the PDPA was enacted?

The Model Data Protection Code.

The Fair Information Practice Principles.

The Model Data Protection Code.

The Electronic Transactions Act.

Which provision of Hong Kong's Personal Data (Privacy) Ordinance (PDPO) strengthens the purpose limitation principle(DPP3)?

Notice; because the data subject must be provided with the purpose of the collection.

Public domain; because the data subjects must agree to the purpose before their information is made publicly available.

Prescribed consent; because the data subject must give express consent to their personal information being used for additional purposes.

Finality; because the purpose for collection of personal information from the subject must be directly related to a function of the collector.

Which of the following is NOT a substantial source of privacy protection for Hong Kong citizens?

The Communications and Surveillance Ordinance.

The Universal Declaration of Human Rights.

Under the PDPO, what are Hong Kong companies that make use of personal data required to do?

Honor all data subject requests for correcting personal information.

Appoint an official compliance officer.

Register with the appropriate data authority.

Honor all data subject requests for correcting personal information.

Provide contact information of persons handling data access requests.

SCENARIO – Please use the following to answer the next question:Dracarys Inc. is a large multinational company with headquarters in Seattle, Washington, U.S.A. Dracarys began as a small company making and selling women's clothing, but rapidly grew through its early innovative use of online platforms to sell its products. Dracarys is now one of the biggest names in the industry, and employs staff across the globe, and in Asia has employees located in both Singapore and Hong Kong.Due to recent management restructuring they have decided, on the advice of external consultants, to open an office in India in order to centralize its call center as well as its internal human resource functions for the Asia region.Dracarys would like to centralize the following human resource functions in India:

Employee assessment and records management;

Employee benefits administration, including health insurance.Dracarys will have employees on the ground in India managing the systems for the functions listed above. They have been presented with a variety of vendor options for these systems, and are currently assessing the suitability of these vendors for their needs.The CEO of Dracarys is concerned about the behavior of her employees, especially online. After having proprietary company information being shared with competitors by former employees, she is eager to put certain measures in place to ensure that the activities of her employees, while on Dracarys' premises or when using any of Dracarys' computers and networks are not detrimental to the business.Dracarys' external consultants are also advising the company on how to increase earnings. Dracary's management refuses to reduce production costs and compromise the quality of their garments, so the consultants suggested utilizing customer data to create targeted advertising and thus increase sales.What must Dracarys confirm about the vendor in India in order to centralize elements of its Human Resource function?

That the vendor submits for approval from Dracarys a privacy notice explaining how personal data will be protected under the Indian Information Technology Act.

That the vendor files requests for transfer of personal data out of India through the offices of the privacy commissioners of Hong Kong and Singapore.

That the vendor is bound by legally enforceable obligations to provide the personal data a standard of protection that is at least comparable to the protection under the Singapore PDPA.

That the vendor adheres to the same sector privacy rules followed by Dracarys headquarters based in Seattle regarding the transfer of personal data.

IAPP CIPP-A Practice Test 3 - Free Online Exam Questions 81-93

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

IAPP CIPP-A Practice Test 3

Question

IAPP CIPP-A Practice Tests

Practice Tests