⭐ RA 10173 (Part 1) Flashcards

1
Q

RA 10173

A

Data Privacy Act of 2012

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Data Privacy Act of 2012

A

RA 10173

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

An act protecting individual personal information in information and communications systems in the government and the private sector, creating for this purpose a national privacy commission, and for other purposes

A

RA 10173: Data Privacy Act of 2012

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

T/F:
Consent shall be evidenced by written, electronic or recorded means, but cannot be given on behalf of the data subject by an agent specifically authorized by the data subject to do so.

A

F;
may also be given on behalf…

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

T/F:
Personal information controller includes:
( 1) A person or organization who performs such functions as instructed by another person or organization; and
(2) An individual who collects, holds, processes or uses personal information in connection with the individual’s personal, family or household affairs

A

F;
excludes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

T/F:
The act applies to information about any individual who is or was an officer or employee of a government institution.

A

F;
does not apply

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

T/F:
The act does not apply to information about an individual who is or was performing service under contract for a government institution.

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

T/F:
The act does not apply to information relating to any discretionary benefit of a financial nature.

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

T/F:
The act does not apply to personal information processed for journalistic, artistic, literary, or research purposes.

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

T/F:
The act applies to information necessary in order to carry out the functions of public authority.

A

F;
does not apply

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

T/F:
The act applies to information necessary for banks and other financial institutions.

A

F;
does not apply

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

T/F:
The act does not apply to personal information originally collected from residents of foreign jurisdictions.

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

RA No. ________:
Publishers, editors or duly accredited reporters of any newspaper, magazine or periodical of general circulation protection from being compelled to reveal the source of any news report or information appearing in said publication which was related in any confidence to such publisher, editor, or reporter.

A

RA No. 53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

T/F:
The entity has a link with the Philippines, and the entity is processing personal information in the Philippines, but the processing should not be outside the Philippines.

A

F;
outside the Ph as long as it is about Philippine citizens or residents

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

responsible for administering and implementing the provisions of this act and to monitor and ensure compliance of the country with international standards set for data protection

A

National Privacy Commission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

T/F:
The Commission cannot be given access to personal information that is subject of any complaint and to collect the information necessary to perform its functions.

A

F;
may be given

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Ensure compliance of personal information controllers

A

National Privacy Commission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Receive complaints, institute investigations, facilitate or enable settlement of complaints, prepare reports on disposition of complaints and resolution of any investigation it initiates, and, in cases it deems appropriate, publicize any such report

A

National Privacy Commission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Issue cease and desist orders, compel or petition any entity, monitor the compliance, coordinate with other government agencies

A

National Privacy Commission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Publish a guide relating to data protection, publish a compilation of agency system, recommend to the DOJ the prosecution and imposition of penalties

A

National Privacy Commission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Review, approve, reject or require modification of privacy codes voluntarily adhered to by personal information controllers

A

National Privacy Commission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Ensure proper and effective coordination with data privacy regulators in other countries and private accountability agents, participate in international and regional initiatives for data privacy protection

A

National Privacy Commission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Provide assistance on matters relating to privacy or data protection

A

National Privacy Commission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Comment on the implication on data privacy of proposed national or local statutes, regulations or procedures, issue advisory opinions and interpret the provisions

A

National Privacy Commission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Propose legislation, amendments or modifications to Philippine laws

A

National Privacy Commission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Ensure proper and effective coordination with data privacy regulators in other countries and private accountability agents, participate in international and regional initiatives for data privacy protection

A

National Privacy Commission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Negotiate and contract with other data privacy authorities of other countries for cross-border application and implementation of respective privacy laws

A

National Privacy Commission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Assist Philippine companies doing business abroad to respond to foreign privacy or data protection laws and regulations

A

National Privacy Commission

29
Q

Generally perform such acts as may be necessary to facilitate cross-border enforcement of data privacy protection.

A

National Privacy Commission

30
Q

T/F:
The privacy codes shall adhere to the underlying data privacy principles.

A

T

31
Q

T/F:
Privacy codes may include public dispute resolution mechanisms for complaints against any participating personal information controller.

A

F;
PRIVATE dispute resolution

32
Q

T/F:
The Commission shall consult with relevant regulatory agencies in the formulation and administration of privacy codes applying the standards in this Act.

A

T

33
Q

Organizational Structure of the
Commission

A

Attached to: DICT
Chairman: Privacy Commissioner
2 Deputy Privacy Commissioners
- Data Processing Systems
- Policies and Planning

34
Q

The Commission shall be attached to what department?

A

Department of Information and Communications Technology (DICT)

35
Q

Chairman of the Commission

A

Privacy Commissioner

36
Q

2 Deputy Privacy Commissioners

A

Data Processing Systems
Policies and Planning

37
Q

2 Deputy Privacy Commissioners appointed by?
For a term of?

A

the President of the Philippines
Term: 3 years (can be reappointed for another 3 years)

38
Q

Privacy Commissioner qualifications

A

(1) must be at least 35 y/o
(2) good moral character, expert in IT and data privacy
(3) shall enjoy the benefits, privileges and emoluments equivalent to the rank of Secretary

39
Q

recognized experts in the field of information and communications technology and data privacy

A

Deputy Privacy Commissioners

40
Q

T/F:
General Data Privacy Principles:
Retained only for as long as necessary for the fulfillment of the purposes for which the data was obtained or for the establishment, exercise or defense of legal claims, or for legitimate business purposes, or as provided by law

A

T

41
Q

T/F:
General Data Privacy Principles:
Kept in a form which permits identification of DATA SUBJECTS for no longer than is necessary for the purposes for which the data were collected and processed

A

T

42
Q

T/F:
Criteria for Lawful Processing of Personal Information:
The data subject has given his or her consent.

A

T

43
Q

T/F:
Criteria for Lawful Processing of Personal Information:
Personal information is necessary and is related to the fulfillment of a contract.

A

T

44
Q

T/F:
Criteria for Lawful Processing of Personal Information:
For compliance with a personal obligation

A

F;
legal obligation

45
Q

T/F:
Criteria for Lawful Processing of Personal Information:
Necessary to protect vitally important interests

A

T

46
Q

T/F:
Criteria for Lawful Processing of Personal Information:
To respond to national emergency, to comply with the requirements of public order and safety, or to fulfill functions of public authority

A

T

47
Q

T/F:
Criteria for Lawful Processing of Personal Information:
For the purposes of the legitimate interests pursued by the personal information controller or by a third party or parties to whom the data is disclosed

A

T

48
Q

T/F:
Processing of sensitive personal information and privileged information is allowed when:
The data subject has given his or her consent, specific to the purpose prior to the processing, or in the case of privileged information, all parties to the exchange have given their consent prior to processing.

A

T

49
Q

T/F:
Processing of sensitive personal information and privileged information is allowed when:
Consent of the data subjects are required by law or regulation permitting the processing of the sensitive personal information or the privileged information.

A

F;
not required

50
Q

T/F:
Processing of sensitive personal information and privileged information is allowed when:
The processing is necessary to protect the life and health of the data subject or another person, and the data subject is not legally or physically able to express his or her consent prior to the processing.

A

T

51
Q

T/F:
Processing of sensitive personal information and privileged information is allowed when:
The processing is necessary to achieve the lawful and commercial objectives of public organizations and their associations.

A

F;
noncommercial

52
Q

T/F:
Processing of sensitive personal information and privileged information is allowed when:
In achieving noncommercial objectives of public organizations and their associations, it should be confined and related to the bona fide members of these organizations or their associations.

A

T

53
Q

T/F:
Processing of sensitive personal information and privileged information is allowed when:
In achieving noncommercial objectives of public organizations and their associations, it should be transferred to third parties.

A

F;
should not be transferred to third parties

54
Q

T/F:
Processing of sensitive personal information and privileged information is allowed when:
In achieving noncommercial objectives of public organizations and their associations, the consent of data subject should be obtained prior to processing.

A

T

55
Q

T/F:
Processing of sensitive personal information and privileged information is allowed when:
The processing is necessary for purposes of medical treatment.

A

T

56
Q

T/F:
Processing of sensitive personal information and privileged information is allowed when:
The processing concerns such personal information as is necessary for the protection of lawful rights and interests of natural or legal persons in court proceedings, or the establishment, exercise or defense of legal claims, or when provided to government or public authority.

A

T

57
Q

T/F:
A personal information controller may subcontract the processing of personal information:
Provided, that he/she shall be responsible for ensuring that proper safeguards are in place to ensure the confidentiality of the personal information processed, prevent its use for unauthorized purposes, and generally, comply with the requirements of this Act and other laws for processing of personal information.

A

T

58
Q

T/F:
Personal information controllers may invoke the principle of privileged information over privileged communication that they lawfully control or process.

A

F;
privileged communication over privileged information

59
Q

T/F:
Subject to existing laws and regulations, any evidence gathered on privileged information is admissible.

A

F;
inadmissible

60
Q

T/F:
It is the right of the data subject to be informed whether personal information pertaining to him or her shall be, are being or have been processed.

A

T

61
Q

T/F:
It is the right of the data subject to be furnished the information indicated hereunder before the entry of his or her personal information into the processing system of the personal information controller, or at the next practical opportunity.

A

T

62
Q

T/F:
It is the right of the data subject to have reasonable access to his/her information upon demand.

A

T

63
Q

T/F:
It is the right of the data subject to dispute the inaccuracy or error in the personal information and have the personal information controller correct it immediately and accordingly even if the request is vexatious or otherwise unreasonable.

A

F;
it is his/her right to dispute unless the request is vexatious or otherwise unreasonable.

64
Q

It is the right of the data subject to suspend, withdraw, or order the blocking, removal or destruction of his or her personal information from the personal information controller’s ________ ________.

A

filing system

65
Q

T/F:
It is the right of the data subject to be indemnified for any damages sustained due to such inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal information.

A

T;
indemnified: be compensated for the damages

66
Q

Who may invoke the rights of the data subject for, which he or she is an heir or assignee at any time after the death of the data subject or when the data subject is incapacitated or incapable of exercising the rights as enumerated in the immediately preceding section?

A
  • lawful heirs
  • assigns of the data subject
67
Q

T/F:
The data subject shall have the right, where personal information is processed by electronic means and in a structured and commonly used format, to obtain from the personal information controller a copy of data undergoing processing in an electronic or structured format, which is commonly used and allows for further use by the data subject.

A

T

68
Q

T/F:
The immediately preceding sections are applicable if the processed personal information are used only for the needs of scientific and statistical research and, on the basis of such, no activities are carried out and no decisions are taken regarding the data subject.

A

F;
not applicable

69
Q

T/F:
The immediately preceding sections are applicable to processing of personal information gathered for the purpose of investigations in relation to any criminal, administrative or tax liabilities of a data subject.

A

F;
not applicable