DSCI Updated DCPLA Exam Questions and Answers by avie

According to the DSCI Privacy Framework, the practice area of “Regulatory Compliance Intelligence (RCI)” is dedicated to helping organizations:

Continuously track evolving laws and regulations (A)

Map these requirements and associated liabilities to data elements and processing activities (B)

Develop internal knowledge management systems for compliance obligations (D)

Option C, however, relates more to access control and information security, which is typically addressed under technical and security safeguard controls, not under the RCI practice area.

==============

Section 15 of the Digital Personal Data Protection Act, 2023 outlines the duties of Data Principals. For breaches of these duties, the Act prescribes a financial penalty not exceeding ten thousand rupees. This provision ensures that Data Principals are accountable for misusing or violating data protection norms while balancing their responsibilities under the Act.

==============

DSCI Privacy Framework recommends a holistic approach to incident management which includes:

Identification and timely notification of incidents (I)

Thorough investigation and effective remediation measures (II)

Conducting root cause analysis to prevent recurrence (III)

Educating users on how to recognize and report incidents (IV)

Each of these components plays a critical role in reducing risk exposure and ensuring continual improvement of the privacy program.

The landmark judgment in “Justice K. S. Puttaswamy (Retd.) and Anr. vs. Union of India And Ors” delivered on August 24, 2017, reaffirmed that:

"The Right to Privacy is protected as an intrinsic part of the Right to Life and Personal Liberty under Article 21 and as a part of the freedoms guaranteed by Part III of the Constitution."

This case is foundational to the development of privacy jurisprudence in India and has guided theformulation of the Indian Data Protection law.