Personal Data Protection ACT(PDPA) Flashcards
Which is the correct sequence of an information life cycle?
a) disclosure/transfer- collection- usage/processing- storage/disposal
b) non- disclosure/transfer- retention- usage/processing- disposal
c) collection-disclosure/transfer- usage/processing- storage/disposal
A
Information Life-Cycle
Propose the following: CollectionUse & Disclosure
Care
Under Section 13-17, what are/is the steps to consent obligation?
a) Only collect, use or disclose personal data with consent
b) Collect, use of disclose personal data for the purpose for which consent has been given
c) Notify individuals of the purpose(s) for collecting, use or disclosure of their personal data
d) Upon request, provide information about use or disclosure of personal data and correct any error or omission
e) Ensure personal data collected is reasonably accurate and complete.
f) Making security arrangements to protect the personal data collected
g) Cease retention of personal data when it is no longer necessary
h) Transfer of personal data to another country only when you can ensure the standard of protection of personal data is comparable
i) Make information about your data protection policies, practices and complaints process available on request.
j) all of the above
k) none
A
Under Section 18, what are/is the steps to Purpose Limitation obligation?
a) Only collect, use or disclose personal data with consent
b) Collect, use of disclose personal data for the purpose for which consent has been given
c) Notify individuals of the purpose(s) for collecting, use or disclosure of their personal data
d) Upon request, provide information about use or disclosure of personal data and correct any error or omission
e) Ensure personal data collected is reasonably accurate and complete.
f) Making security arrangements to protect the personal data collected
g) Cease retention of personal data when it is no longer necessary
h) Transfer of personal data to another country only when you can ensure the standard of protection of personal data is comparable
i) Make information about your data protection policies, practices and complaints process available on request.
j) all of the above
k) none
B
Under Section 20, what are/is the steps to The Notification Obligation?
a) Only collect, use or disclose personal data with consent
b) Collect, use of disclose personal data for the purpose for which consent has been given
c) Notify individuals of the purpose(s) for collecting, use or disclosure of their personal data
d) Upon request, provide information about use or disclosure of personal data and correct any error or omission
e) Ensure personal data collected is reasonably accurate and complete.
f) Making security arrangements to protect the personal data collected
g) Cease retention of personal data when it is no longer necessary
h) Transfer of personal data to another country only when you can ensure the standard of protection of personal data is comparable
i) Make information about your data protection policies, practices and complaints process available on request.
j) all of the above
k) none
C
Under Section 21-22, what are/is the steps to The Access & Correction Obligations?
a) Only collect, use or disclose personal data with consent
b) Collect, use of disclose personal data for the purpose for which consent has been given
c) Notify individuals of the purpose(s) for collecting, use or disclosure of their personal data
d) Upon request, provide information about use or disclosure of personal data and correct any error or omission
e) Ensure personal data collected is reasonably accurate and complete.
f) Making security arrangements to protect the personal data collected
g) Cease retention of personal data when it is no longer necessary
h) Transfer of personal data to another country only when you can ensure the standard of protection of personal data is comparable
i) Make information about your data protection policies, practices and complaints process available on request.
j) all of the above
k) none
D
Under Section 23, what are/is the steps to The Accuracy Obligations?
a) Only collect, use or disclose personal data with consent
b) Collect, use of disclose personal data for the purpose for which consent has been given
c) Notify individuals of the purpose(s) for collecting, use or disclosure of their personal data
d) Upon request, provide information about use or disclosure of personal data and correct any error or omission
e) Ensure personal data collected is reasonably accurate and complete.
f) Making security arrangements to protect the personal data collected
g) Cease retention of personal data when it is no longer necessary
h) Transfer of personal data to another country only when you can ensure the standard of protection of personal data is comparable
i) Make information about your data protection policies, practices and complaints process available on request.
j) all of the above
k) none
E
Under Section 24, what are/is the steps to The
Protection Obligations?
a) Only collect, use or disclose personal data with consent
b) Collect, use of disclose personal data for the purpose for which consent has been given
c) Notify individuals of the purpose(s) for collecting, use or disclosure of their personal data
d) Upon request, provide information about use or disclosure of personal data and correct any error or omission
e)Ensure personal data collected is reasonably accurate and complete.
f) Making security arrangements to protect the personal data collected
g) Cease retention of personal data when it is no longer necessary
h) Transfer of personal data to another country only when you can ensure the standard of protection of personal data is comparable
i) Make information about your data protection policies, practices and complaints process available on request.
j) all of the above
k) none
F
Under Section 25, what are/is the steps to The Retention Limitation obligation?
a) Only collect, use or disclose personal data with consent
b) Collect, use of disclose personal data for the purpose for which consent has been given
c) Notify individuals of the purpose(s) for collecting, use or disclosure of their personal data
d) Upon request, provide information about use or disclosure of personal data and correct any error or omission
e) Ensure personal data collected is reasonably accurate and complete.
f) Making security arrangements to protect the personal data collected
g) Cease retention of personal data when it is no longer necessary
h) Transfer of personal data to another country only when you can ensure the standard of protection of personal data is comparable
i) Make information about your data protection policies, practices and complaints process available on request.
j) all of the above
k) none
G
Under Section 26, what are/is the steps to The Transfer Limitation obligation?
a) Only collect, use or disclose personal data with consent
b) Collect, use of disclose personal data for the purpose for which consent has been given
c) Notify individuals of the purpose(s) for collecting, use or disclosure of their personal data
d) Upon request, provide information about use or disclosure of personal data and correct any error or omission
e) Ensure personal data collected is reasonably accurate and complete.
f) Making security arrangements to protect the personal data collected
g) Cease retention of personal data when it is no longer necessary
h) Transfer of personal data to another country only when you can ensure the standard of protection of personal data is comparable
i) Make information about your data protection policies, practices and complaints process available on request.
j) all of the above
k) none
H
Under Section 11-12, what are/is the steps to The Openness Limitation obligation?
a) Only collect, use or disclose personal data with consent
b) Collect, use of disclose personal data for the purpose for which consent has been given
c) Notify individuals of the purpose(s) for collecting, use or disclosure of their personal data
d) Upon request, provide information about use or disclosure of personal data and correct any error or omission
e) Ensure personal data collected is reasonably accurate and complete.
f) Making security arrangements to protect the personal data collected
g) Cease retention of personal data when it is no longer necessary
h) Transfer of personal data to another country only when you can ensure the standard of protection of personal data is comparable
i) Make information about your data protection policies, practices and complaints process available on request.
j) all of the above
k) none
I
