Exam CIPP-A topic 1 question 40 discussion

Actual exam question from IAPP's CIPP-A

Question #: 40
Topic #: 1

[All CIPP-A Questions]

Section 43A of India's IT Rules 2011 requires which of the following for a privacy policy?

A. It should be available and produced on request.
B. It should be published on the website of the body corporate.
C. It should be emailed or faxed to data providers by the body corporate.
D. It should be shown to the data provider at the time of data collection.

Show Suggested Answer

Suggested Answer: A 🗳️

by TERENCELEE at June 8, 2023, 4:34 p.m.

Comments

Submit Cancel

Bhimesh

1 year, 3 months ago

Answer B - Rule 4 imposes a duty on Body Corporates seeking sensitive personal data to draft a privacy policy and make it easily accessible for people who are providing the information. The privacy policy should be clearly published on the website of the body corporate and should contain details on the type of information that is being collected, the purpose for which it has been collected and the reasonable security practices that have been undertaken to maintain the confidentiality of such information.

upvoted 1 times

...

rhyst1921

1 year, 4 months ago

Selected Answer: B

Rule 4 provides that the every body corporate that deals with sensitive personal data or information must have a privacy policy which shall be published on its website and provide for: - clear and easily accessible statements of its practice and policies - types of SPDI collected - purpose - disclosure - RSPP

upvoted 1 times

...

TERENCELEE

2 years, 1 month ago

The privacy policy should be clearly published on the website of the body corporate and should contain details on the type of information that is being collected, the purpose for which it has been collected and the reasonable security practices that have been undertaken to maintain the confidentiality of such information.

upvoted 2 times

...