Data Privacy Training - Questionnaire

Grabbie received a request from a vendor to send some files containing Personal Data to his email address (instead of sending it to the usual corporate account). What Should Grabbie do?

• Send the files to that personal email address because we have all the agreements in place.

• Do not send the files to the personal email address. Grabbie should approach DPO for further advice.

• Send the files, no worry our manager will support us. We are doing business here.

Grabbie had accidentally sent a file containing Personal Data of 10,000 customers to a group of unintended recipients. What Should Grabbie do?

• Report this incident to DPO

• File a police report

• Tell the managers and IT team to take that back

You got a whatsapp from one of public officials you know and have good relation with, asking for aggregate data. Can you share the data with them?

• No, we cannot share the data directly with them as it is personal data

• No, we cannot share the data because we need to make sure with business first whether the data is alright to share and whether it is confidential or not. We further need to check to PA and DPO for clearance before sending the data

Grabbie was asked by her best friend to provide her boyfriend’s transactions and trip details which Grabbie has access to. What Should Grabbie do?

• Tell her best friend the details verbally instead of sending such data over email. This way, no one knows!

• Send it from our personal email and ask her best friend to promise not to tell.

• Reject her best friend’s request

Grabbie would like to send surprise GrabFood meals to Grabbers whom she works closely with. Grabbie tried to get home addresses or phone numbers but Grab doesn’t list them on Workday. What Should Grabbie do?

• Approach her colleagues directly for such Personal Data

• Contact Pops to request for such Personal Data

• ask one of her team, she would know

Grabbie is tasked to throw away 200 hardcopies files containing Employee’s and DAX’s documents. What Should Grabbie do?

• Save the world! Grab should reuse, reduce and recycle paper products! Make paper trees, stationary holders, or sell it to the rag-and-bone man for that extra $. Oh wow, the possibility is endless.

• Bring back.the papers home, give it to your niece its free drawing papers

• Destroy the files using a paper-shredding machine, or engage a security disposal company to do the job.

You were asked to give 15 of Grab's DAX names by police force for the purpose of criminal investigation. However, they have not yet provided official letter to you.

What would you do?

• Ask for the official letter and in parallel contact DPO, PA, and Safety

• Say that we cannot give it to them at all without clear legal basis why they need it

Grabbie is tasked to lead a Marketing campaign, and is required to disclose DAX’s Personal Data to our vendors on a monthly basis for processing. What Should Grabbie do?

• Approach Vendor Security for proper registration of vendors and Legal team to ensure that we have all necessary agreements in place. Approach DPO to ensure that we comply to the proper collection, use and disclosure of Personal Data.

• Let’s execute the process. Create a Google Form, run the campaign and send the data to the vendor!

• Ask the manager approval, it is one of his/her responsibility too

Oh-ohhh...Grabbie needs to take a break. What are things that she should be mindful of?

• No time to lose! A break is a break. #Dash

• Put away the hardcopies that contains commercially sensitive information or Personal Data. Do a screen lock of her laptop before walking away from her desk.

• There is security team around no outsider will come and take anything. This building is safe

Grabbie is tasked to create a Google Form to collect Personal Data for a survey. There are some key considerations that she needs to be mindful of. What are these key considerations?

• List the purposes of such surveys to the audience. Collect only required Personal Data, restrict collaborator’s access to the Google Form and ensure that the survey responses are set to private mode.

• All of the above, and set a retention period to such Google Forms.