Digital Personal Data Protection Act

Any person who determines the purpose and means of processing of personal data is called:

• a) Data Principal

• b) Data Fiduciary

• c) Data Handler

• d) Data Organiser

Penalty for breach in observance of additional obligations in relation to children under section 9 may extend upto:

• a) 200 crores rupees

• b) 250 crores rupees

• c) 2000 crores rupees

• d) 2500 crores rupees

If a person is collecting data in non-digital form from data principal and digitizes it subsequently; is Digital Personal Data Protection applicable?

• a) Yes

• b) No

The consent given by Data Principal shall be free, specific…:

• a) informed, unconditional, unambiguous

• b) informed, conditional, unambiguous

• c) informed, unconditional, ambiguous

• d) uninformed, unconditional, unambiguous

X buys an insurance policy using the mobile app of an insurer. She gives to Y her consent for (i) the processing of her personal data by Y for the purpose of issuing the policy, and (ii) waiving her right to file a complaint to the Data Protection Board of India. Which parts of the consent are valid?

• a) Both parts are valid

• b) Part (i) is valid; Part (ii) is invalid

• c) Part (i) is invalid; Part (ii) is valid

• d) Both parts are invalid

X registers herself on an online marketplace operated by Y, an e-commerce service provider. X gives her consent to Y for the processing of her personal data for selling her used car. The online marketplace helps conclude the sale. Can Y retain X's data for promotional messages?

• a) Yes

• b) No

X takes a loan from Y, a bank. X defaults in paying her monthly loan repayment instalment on the date on which it falls due. Can Y process the personal data of X for ascertaining her financial information and assets and liabilities.

• a) Yes

• b) No

X while blogging her views, has publicly made available her personal data on social media. In such case, the provisions of this Act shall apply.

• a) True

• b) False

Penalty for breach in observing the obligation of Data Fiduciary to take reasonable security safeguards to prevent personal data breach under sub-section (5) of section 8 may extend upto:

• a) 200 crores rupees

• b) 250 crores rupees

• c) 2000 crores rupees

• d) 2500 crores rupees

The individual to whom the personal data relates is called:

• a) Data Principal

• b) Data Fiduciary

• c) Data Primary

• d) Data Key