CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Information Systems
A hospital in Hyderabad keeps patient health records in a database. A DBA with full privileges copies the table to a personal drive and shares it externally without authorisation. Which statement is most accurate under Indian cyber law and database security concepts?
Unauthorised copying or extraction of data can attract IT Act offences and compensation liability even when the person holds administrator access, because that access does not authorise exporting data for personal use. Altering the data or its being encrypted is not a condition for liability.
- AOnly role-based access control is breached; no cyber law provision applies since the DBA was authorised to access the system
- BUnauthorised copying or extraction of data can attract the IT Act, 2000 data-related offences and compensation liability, even if the person had system access, because the access right does not cover the misuseCorrect
- CThe act is lawful if the DBA does not alter the data
- DThe act is an offence only if the data was encrypted at the time
Explanation
The IT Act penalises unauthorised downloading, copying or extraction of data from a computer resource by a person without permission of the owner; permission to administer a system is not permission to export data for personal use. Not altering data is irrelevant, and encryption is not a condition for liability. Such data may also be sensitive personal data attracting data protection duties.
Did you get it right without looking?
One question tells you little. A timed set on Information Systems shows your real accuracy, how long you take and where you lose marks.
More Information Systems questions
- A Bengaluru fintech suffers a ransomware attack that encrypts its servers. Its backups are stored on a network drive permanently mounted to …
- A firm's database records an employee's department name and department head in every employee row, so changing a department head means editi…
- Aarav Textiles Ltd. keeps a fully equipped duplicate data centre in Pune with live data replication, so operations can switch over within mi…
- A retail chain integrates its purchase, inventory, finance and HR modules on a single database so that a goods receipt entry automatically u…
- A manufacturing company uses software that records every sale, immediately updates the stock ledger, and generates invoices at the billing c…
- Which activity is performed first when developing a business continuity plan, because its output drives the selection of recovery strategies…