ion.aspx A Oc. If you deploy appropriate safeguards such as encryption and data masking, data may be stored anywhere in the world. Od. In the internet era, any data may be accessed from anywhere in the world, and since client knows we are a global organization, we don't have to inform client about location of processing O 4. Infosys is transitioning a scope of work from another vendor of client and as part of this transition Infosys will get access to clients data including PII. What should Infosys project team do in order to not cause any breach or violation of privacy regulation I Oa. a. Since it is in transition phase, I will leave it to the transition team to decide Ob. Assume that client is already aware and PII is supposed to be accessed by Infosys team Oc. Inform client or delivery leadership of such access to Pll and insist on having necessary safeguards in place. Infosys should also assess the risks prior to engaging in such processing. Od. Clients vendor had access to the PII data and the same is now transferred to Infosys. So no need to notify the client. 5. In your project, client data (including PII - Personally Identifiable Information) can be accessed or viewed only from within client network via VPN or other remote connectivity. You don't have any instructions to work on the data you get to access or view. Does it still qualify as 'Processing PII" under applicable privacy laws and regulations. O a a. No. Since there is no access to modify, add or delete data, it doesn't quality as 'processing PII' Ob. No. Even though we have access to modify, add or delete data, it is still within client network and data cannot be taken out of client network Oc c. No. Since there are system level restrictions on saving any data from client network to local system. Od. Yes. Even viewing of Pll within client network is considered as 'Processing PII' 6. You have access to client email ID, Name, business contact details, title etc while handling day to day communication via Email (MS Outlook) or Chat platform (MS Teams, Skype etc). Do we still need to comply to privacy regulation?" O a. Yes. But it is only incidental in nature. O b. No 9 ?