Data Privacy

Data Privacy Awareness Quiz

Test your knowledge on data privacy with our engaging quiz designed to educate you on the importance of protecting personal information. This quiz covers various aspects of data privacy regulations, best practices at Chevron, and common pitfalls to avoid.

Understand sensitive personal data
Learn about reporting incidents
Discover privacy by design principles

16 Questions4 MinutesCreated by ProtectingData101

Which of the following situations does not need to be reported as a Chevron data privacy incident?

Emailing sensitive personal data to the wrong person within the Chevron network

Posting a file with individual PSGs and salaries on a SharePoint® site accessible to everyone inside the Chevron network

Leaving your own credit card bill on your desk

Sharing a file on an unsecured drop box containing home contact information for individuals in your work group

These all need to be reported as privacy incidents

What is the most common cause of data privacy incidents at Chevron?

Malware on Internet sites

Human performance issues

Spearphishing emails designed to steal sensitive personal data

Criminals hacking the Chevron network

Which of these are examples of human performance issues that may cause a data privacy incident at Chevron?

Poor access controls on SharePoint® sites and shared drives

Misdirected emails

Unsecured hard copies, such as sensitive personal data left on printers or desks

All of these

Pick the item that is not sensitive personal data.

Credit card/payment card numbers

Biometric data

Business contact information in small amounts

Work safety records for individuals

Pick the item that is sensitive personal data.

Which statement is true for privacy by design and by default?

It takes privacy into account throughout the entire life cycle of the personal data

It assumes privacy protection as the default setting

It supports Chevron’s Privacy Principles

All of these

It should be clear that no data traditionally viewed as sensitive or harmful should be gathered "by default" from consumers using computer services. This includes all but:

Data revealing racial or ethnic origin

Public business data

Religious or philosophical beliefs

Biometric data for the purpose of uniquely identifying a natural person

Which of these actions can help you and your family members protect your personal data at home?

Think about the consequences of sharing personal data on social media sites, such as birthdays, place of birth, photos of children or vacation dates when you will be away from home.

Use social media privacy settings carefully to limit the personal data that is revealed about you, such as limiting access to "friends only."

Be extra careful when you click on links in emails, especially emails that ask you to confirm your login information. Instead, go directly to secure websites to check or update your profiles or personal data.

If a doctor’s practice or others ask for your Social Security number, question whether there is a different way to identify you. Share only the minimum personal data needed for the purpose.

All of the above.

Which of these are not examples of the Security Privacy Principle?

Manage access controls to control who can view or handle personal data, and have an approved plan to test and update them

Update each individual’s site and system access when they change jobs

Share files containing personal data freely on a departmental SharePoint® site

Protect personal data with adequate security

How long should we keep a document or email containing personal data, according to the Privacy Principle on Proportionality?

Do not delete documents or emails if they contain personal data

Keep them only as long as needed to meet retention requirements, business needs and any preservation orders

Delete a document or email containing personal data after 30 days

Who is responsible for protecting personal data at Chevron?(Select the best answer.)

The Global Privacy manager

The Corporation Law department

All employees and contractors

Heads of reporting units

Which statement is an example of data privacy by design?

Collect more personal data than is needed just in case you need it late

Only the personal data required is collected by the process

The process never needs to be reviewed to ensure that only required personal data is collected

Which statement true?

Incorporated into Chevron's Privacy Principles, standards and assessments;

Required by the General Data Protection Regulation (GDPR) in the European Union (EU);

An approach to developing processes and tools that includes privacy considerations for planning, developing, managing, or changing any process; and

Reflects Human Performance Principles

All of the above

Data Privacy

Data Privacy Awareness Quiz

More Quizzes