Fundamentals I

Question 1

OECD Fair Information Practice Principles - What are the 8 FIPS?

Answer 1

CUPIDASO

Collection Limitation, Use Limitation, Purpose Specification, Individual Participation, Data Quality, Accountability, Security Safeguards, Openness

Question 2

What are the primary purposes of the APEC Privacy Framework?

Answer 2

APEC member economies realize the enormous potential of electronic commerce to expand business opportunities, reduce costs, increase efficiency, improve the quality of life, and facilitate the greater participation of small business in global commerce. A framework to enable regional data transfers will benefit consumers, businesses, and governments.

Question 3

APEC Privacy Framework has 9 FIPs (including OECD 8 FIPs). What are these? Which is the principle not found in the OECD Guidelines?

Answer 3

PANICC USA
Preventing harm
Access and correction
Notice
Integrity of personal information
Collection limitation
Choice
Uses of personal information
Security safeguards
Accountability

The principle not found is preventing harm.

Question 4

Which countries are deemed adequate? Provide examples of those adequate and not adequate.

Answer 4

Adequate:
Andorra
Argentina
Canada (commercial organisations)
Faeroe Islands
Guernsey
Isle of Man
Israel
Japan
Jersey
Korea (New)
New Zealand
Switzerland
Uruguay
UK (from 28 June 2021)
US* - Air Passenger Name Records. Note: US Privacy Shield invalidated on 16 July 2020 by the Court of Justice of the European Union, but Air Passenger Name Records remain.

Not Adequate: Australia, Mexico, Taiwan

Question 4

What are the GDPR principles? Under the GDPR, how to transfer from EU countries to non EU countries?

Answer 4

APSIDAL - Accuracy, Purpose Limitation, Storage Limitation, Integrity and Confidentiality, Data Minimisation, Accountability, Lawfulness + Fairness + Transparency

Adequacy, Standard Contractual Clauses, Binding Corporate Rules.

Supplementary Measures such as Transfer Impact Assessment.