Data privacy act Flashcards
An Act Protecting Individual Personal Information in
Information and Communications Systems in the Government and the Private Sector
Data Privacy Act of 2012
When was the Data Privacy Act of 2012 enacted
Aug 15 2012
Supports the right of persons to life, liberty and
property
Right to privacy
Under the Bill of rights include these four:
- Due process
- Self incrimination
- Freedom of speech
- Freedom of religion
Individuals ability to control the flow of information
concerning or describing him
Right to information privacy
Right to Privacy must be overbalanced by _____
legitimate public concerns
_____ of information on the part of the patient is a prerequisite to quality care and better health outcomes.
Full disclosure
Implicit in the “Declaration of Policy” of the DPA is
the recognition that: (2 of them)
- Law protects privacy
2. Free flow of information
____ should not an obstacle for people to
obtain benefits from utilization of personal data
Data protection
Use of personal data comes with a responsibility. The
_____ subjects should, at all times, be a
paramount consideration.
rights of data
Any information from which the identity of an
individual is apparent
personal data
Data containing Race, ethic origin, marital staturs, certificates issued by government agencies, education etc.
Sensitive personal information
Processing of data can be done via: ( 2 of them)
- automatically
2. Manually
Who Process Personal Data
Personal information controller (PIC)
the one who controls the processing of personal data, the one who decides
The individual, corporation or other sectors
They are the ones that will be held liable in circumstances when Data Privacy Act is violated
Personal information controller (PIC)
PIC is usually the head of the agency/ company.
Not the employees, not the data protection
officer, NOT the _____
Chief information officer
Individual, corporation, or other body who
processes the personal data for a Personal
Information Controller (outsource. Ex: EMR
Provider)
Personal Information Processor
Transparent data must be aware of : (2)
- Nature
2. Purpose
4 Extent of the processing of his/her personal data
- Risk and safety
- Identify PIC
- Rights as data subject
- How these rights are exercised
The processing of information shall be with a declared
and specified purpose which must not be contrary to law, morals, or public policy
LEGITIMATE PURPOSE
Proportionality must be these 4
→ Adequate
→ Relevant
→ Suitable
→ Necessary