Which of the following is not required by an organization in US, resorting to EU-US Safe Harbor provisions, to transfer personal information from EU member nation to US?
For negligence in implementing and maintaining the reasonable security practices and procedures for protecting Sensitive Personal Data or Information (SPDI) as mentioned in Section 43A and associated rules under IT (Amendment) Act, 2008, a corporate entity may be liable to pay compensation of up to___________
A public domain or freely accessible piece of information cannot be construed as sensitive personal data or information under Indian law.
According to EU authorities, which country has yet to receive adequacy status?
As a privacy assessor, what would most likely be the first artifact you would ask for while assessing an organization which claims that it has implemented a privacy program?
According to which of the following data privacy laws does "challenging compliance" fall under?
What of the following is a lawful basis under Article 6 of the General Data Protection Regulation, 2016?
In the wake of privacy-related concerns arising from various policies around the world, which of the following has not driven increased regulatory responses?
Regarding projects such as Aadhaar, the National Population Register (NPR), etc. that involve national government projects specific to India, which of the following statements is accurate?
Among the following options, which would be the most appropriate for the transfer of Personal and Sensitive data from an EU company to another organization outside the EU?