IAS 2 Lab Quiz MidTerm BSIT 4C

Personal information controllers are required to obtain consent from individuals before processing their sensitive personal information.

• True

• False

The Data Privacy Act only applies to information processing done by private companies.

• True

• False

If a company suffers a data breach, it must report the breach to the National Privacy Commission (NPC) within 72 hours.

• True

• False

Government agencies are exempt from the provisions of the Data Privacy Act.

• True

• False

Data subjects have the right to request access to their personal information held by an organization.

• True

• False

Organizations are required to retain personal data indefinitely for possible future use.

• True

• False

The Data Privacy Act allows data subjects to file complaints directly with the National Privacy Commission if they believe their privacy rights have been violated.

• True

• False

Employees of an organization do not have the right to access personal information collected by their employer during recruitment.

• True

• False

Data subjects can request the correction of inaccurate or incomplete data held about them under the Data Privacy Act.

• True

• False

Organizations can share personal data with third parties without notifying data subjects if the data will be used for research purposes.

• True

• False