HIS FINALS: MODULE 5 (4) Flashcards
the data subject has the right to know when his or her data shall be, are being, or have been processed
THE RIGHT TO BE INFORMED
Collection and processing of data without the data subject’s knowledge and explicit consent are made unlawful, and entities in possession of personal data are obligated to inform the data subject of any breaches or compromises in their data.
the right to be informed
it involves being able to compel any entity possessing any personal data to provide the data subject with a description of such data in its possession, as well as the purposes for which they are to be or are being processed.
the right to access
it involves being able to compel any entity possessing any personal data to provide the data subject with a description of such data in its possession, as well as the purposes for which they are to be or are being processed.
the right to access
Furthermore, other details regarding the processing of their information may be obtained, such as the period for which the information will be stored, and the recipients to whom the information may be disclosed.
the right to access
This must be complied with in an easy-to-access format, accompanied by a description in plain language.
the right to access
it requires that the consent of the data subject be secured in the collecting and processing of his or her data.
the right to object
It grants the data subject the choice of refusing to consent, as well as the choice to withdraw consent, as regards collection and processing.
the right to object
any activity involving a data subject’s data without his or her consent is deemed illegal.
the right to object
it allows the data subject to suspend, withdraw or order the blocking, removal, destruction of his or her personal information from the personal information controller’s filing system upon discovery and substantial proof that the personal information is incomplete, outdated, false, unlawfully obtained, used for unauthorized purposes or are no longer necessary for the purposes for which they were collected. This is akin to the recognized right to be forgotten.
right to erasure or blocking
it allows the data subject to dispute any inaccuracy or error in the personal information processed, and to have the personal information controller correct it immediately.
rightto rectify
In line with this, the personal information controller must ensure that the new and the retracted information will be accessible, and that third parties who received the erroneous data will be informed, upon the request of the data subject.
right to rectify
it enables the data subject to obtain and electronically move, copy, or transfer personal data for further use
right to data portability
This also carries out another policy behind the law–ensuring the free flow of personal information.
right to data portability
with the National Privacy Commission affords a remedy to any data subject who “[feels] that [his or her] personal information has been misused, maliciously disclosed, or improperly disposed of,” or in case of any violation of his or her data privacy rights.
rightto file a complaint