Certified Information Privacy Professional – Asia (CIPP/A) — Question 69

What clarification did India make in a 2011 Press Note regarding their Sensitive Personal Data Rules?

Answer options

• A. That the rules apply to data subjects located outside of India.
• B. That the rules apply to persons or companies collecting sensitive data within India.
• C. That the data processor must provide notice to the data subject before data is processed.
• D. That sensitive personal data or information includes passwords, financial information, medical records, and biometric information.

Correct answer: D

Explanation

The correct answer, D, accurately reflects the definition of sensitive personal data as specified in the Press Note, including various types of sensitive information. Options A and B misinterpret the scope of the rules, while C addresses notification requirements that are not the main focus of the clarification made in the Press Note.