Data Privacy and Protection

What is a crucial condition for making decisions through automated processing?

consent of the data subject

What is the primary function of the National Privacy Commission (NPC) in relation to data privacy?

To educate the public about data privacy, data protection and fair information rights and responsibilities.

What is one of the key responsibilities of a Data Protection Officer?

ensuring compliance with the DPA

What is the main responsibility of a personal information controller in compliance with the Data Privacy Act?

To register data processing systems and notify automated processing operations that significantly affect data subjects. Signup and view all the answers

What is a common consequence of data breaches that organizations fear?

bad publicity and potential lawsuits by customers Signup and view all the answers

What is the purpose of the NPC's compliance and monitoring functions?

To ensure personal information controllers comply with the law and to manage the registration of personal data processing systems. Signup and view all the answers

What is a 'data subject' in the context of the Data Privacy Act?

An individual whose personal, sensitive personal or privileged information is processed. Signup and view all the answers

What is a recommended measure to address security incidents or personal data breaches?

creation of a data breach response team Signup and view all the answers

Under what circumstances is an individual or institution exempt from registering their data processing systems?

If they employ fewer than 250 employees and their data processing operations do not involve sensitive personal information, pose a risk to data subjects, or are occasional. Signup and view all the answers

What is a necessary step in ensuring data privacy compliance?

adoption of data protection policies Signup and view all the answers

What is the purpose of notifying automated processing operations under the Data Privacy Act?

To ensure that data subjects are aware of the processing of their personal data and the potential risks and consequences of such processing. Signup and view all the answers

What type of report must be submitted annually?

summary of documented security incidents and personal data breaches Signup and view all the answers

What is the geographic scope of the DPA, and what are the conditions for its application?

The DPA applies to all acts done or practices engaged in and outside of the Philippines if the person involved in the processing of personal data is located in the Philippines, the act or practice involves personal data of a Philippine citizen or resident, the processing of personal data is done in the Philippines, or the act is done by an entity with links to the Philippines. Signup and view all the answers

What does the term 'personal data' refer to under the DPA?

All types of personal information. Signup and view all the answers

What are some examples of 'processing' operations under the DPA?

Collection, recording, organization, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure, or destruction of data. Signup and view all the answers

What is the primary function of the National Privacy Commission (NPC) under the DPA?

To administer and implement the DPA, and to monitor and ensure compliance of the Philippines with international standards for personal data protection. Signup and view all the answers

What are some of the key functions of the NPC under the DPA?

Rule making, advisory, and monitoring and ensuring compliance of the Philippines with international standards for personal data protection. Signup and view all the answers

What is the significance of the Data Protection Directive (95/46/EC) in relation to the DPA?

The DPA was modeled after the Data Protection Directive (95/46/EC), with many of its terminologies and provisions similar to privacy laws in other jurisdictions. Signup and view all the answers