DSCI Certified Privacy Professional (DCPP) — Question 5

According to The Information Technology (Reasonable Security Practices And Procedures and Sensitive Data or Information) Rules, 2011, which of the following does not fall under the category of Sensitive Personal Data or Information?

Answer options

• A. Sexual orientation
• B. Password
• C. Medical records and history
• D. Religious Beliefs

Correct answer: B

Explanation

The correct answer is B, as passwords are generally considered security credentials rather than sensitive personal data. In contrast, sexual orientation, medical records, and religious beliefs are explicitly categorized as sensitive personal data under the rules.