Quiz 1: Mid-Course — DPDP Act 2023 Compliance

Question 1 of 5

Under the DPDP Act 2023, who bears the primary compliance obligations for personal data processing?

AThe Data Principal BThe Data Fiduciary CThe Data Processor DThe Data Protection Board

Question 2 of 5

Which of the following is NOT one of the requirements for valid consent under the DPDP Act?

AThe consent must be free and specific BThe consent must be informed and accompanied by a consent notice CThe consent must be recorded in a government-approved digital consent repository DThe consent must be expressed through an unambiguous affirmative action

Question 3 of 5

Which of the following personal data processing activities does NOT require the consent of the Data Principal under the DPDP Act?

AProcessing customer data for targeted advertising BProcessing employee data for payroll and HR purposes (a legitimate use) CProcessing customer data for personalisation of a subscription service DProcessing data for market research about individual purchasing habits

Question 4 of 5

A data breach at a company exposes the personal data of 10,000 customers. The company notifies affected customers but does not report the breach to the Data Protection Board. Under the DPDP Act, what is the maximum penalty for this failure?

ARs. 10 crore BRs. 50 crore CRs. 200 crore DRs. 10,000 crore

Question 5 of 5

Under the DPDP Act, a Data Principal withdraws consent for processing their personal data. Which statement is accurate?

AThe withdrawal invalidates all previous processing that occurred before the withdrawal BThe Data Fiduciary must cease processing but may retain previously collected data indefinitely CThe Data Fiduciary must cease processing after withdrawal; previous lawful processing is unaffected DWithdrawal of consent is only effective if made in writing to the Data Protection Board

Quiz 1 — Mid-Course