Data Privacy Act Flashcards
What is the protection afforded to journalists and their sources?
It is the protection from being compelled to reveal the source of any news report or
information appearing in said publication which was related in any confidence to such
publisher, editor or reporter.
What is the Principle of Transparency?
The Data Subject must be aware of the nature, purpose, and extent of the Processing of
his or her Personal Data by the Company, including the risks and safeguards involved,
the identity of persons and entities involved in processing his or her
* Personal Data, his or her rights as a Data Subject, and how these can be exercised.
What is a Data Subject?
It refers to an individual whose personal information is processed
Who is excluded from being a personal information controller?
The term personal information controller excludes the following:
i. A person or organization who performs such functions as instructed by another
person or organization; and
ii. An individual who collects, holds, processes or uses personal information in
connection with the individual’s personal, family or household affairs
What is a Data Subject?
It refers to an individual whose personal information is processed.
Who is excluded from being a personal information controller?
The term personal information controller excludes the following:
i. A person or organization who performs such functions as instructed by another
person or organization; and
ii. An individual who collects, holds, processes or uses personal information in
connection with the individual’s personal, family or household affairs
Is the right of the Data Subject transferable?
YES. The lawful heirs and assigns of the data subject may invoke the rights of the data
subject for which he or she is an heir or assignee at any time after the death of the data
subject or when the data subject is incapacitated or incapable of exercising his rights.
What are the qualifications of the Privacy Commissioner?
- At Least 35 years of age
- Of good moral character, unquestionable integrity and known probity, and
- A recognized expert in the field of information technology and data privacy.
When are the rights of a data subject not applicable?
- If the processed personal information are used only for the needs of scientific and
statistical research and, on the basis of such, no activities are carried out and no
decisions are taken regarding the data subject: Provided it should be held under strict
confidentiality and used only for declared purpose. - For the purpose of investigation.
When a data privacy violation is considered to be large-scale?
If the personal information of at least 100 persons is harmed.
What are the General data privacy principles?
- principle of proportionality
- principle of legitimate purpose
- principle of transparency
Processing of personal data shall be?
- adequate
- relevant
- suitable
- necessary
- not excessive in relation to a declared and specified purpose
What is the maximum imprisonment of unauthorized access of personal information?
1 to 3 years
What republic act that seeks to protect all forms of information, be it private, personal
or sensitive?
Republic Act No. 10173 or also as Data Privacy Act
Principle of Proportionality
This principle provides that the processing of personal data shall be adequate, relevant,
suitable, necessary and not excessive in relation to a declared and specified purpose?
