PDPA

What is the purpose of the implementation of Personal Data Protection Act 2010?

• To provide protection from debit collector.

• To provide protection for company to process data and information for the purposes of commercial transactions.

• To provide protection for an individual's personal information to be processed for the purposes of commercial transactions.

• To provide protection for an individual's personal information to be processed for the purposes of non-commercial transactions.

Based on PDPA, below are the customer’s rights when an organization take and record customer’s personal details for commercial transaction purposes. Choose all the customers’ rights that applies

• The rights to reject a call or email from direct marketing

• The rights to access personal data where necessary.

• The rights to correct the personal data that have been processed.

• The rights to be told whether their data is processed by an organization.

Which of the following is considered as personal data?

• NRIC or passport number

• Residential address

• Thumb print

• Astro Account Number

A data breach can happen in any one of below scenarios due to carelessness, negligence, ignorance and misuse. What are the possible exposures of data breach?

• Shred unused collected prints containing personal data.

• Weak password and unsecured online registered accounts.

•                   Revealing too much of personal data on Social Media.

• Sharing or exchanging unprotected documents using cloud services.

“Personal data shall not without the consent of the data subject, be disclosed for any purpose other than the purpose disclosed or to any party other than third parties whom the data subject has permitted”.

The PDPA asserts seven Personal Data Protection Principles which must be complied with, when processing the personal data. Which of the following best represent the above Principle statement?

• Data Integrity Principle

• Disclosure Principle

• Security Principle

• General Principle