The PDPA establishes a data protection law that comprises various rules governing the collection, use, disclosure and care of personal data.

• True

• False

Consent is considered given when someone voluntarily hands over personal data to an organisation, and they are also able to withdraw the consent anytime.

• True

• False

Organisations are not required to inform customers of the purpose of the data collected.

• True

• False

Organisations can keep the data for as long as there is a business reason to do so and avoid the unnecessary cost to properly dispose of the data.

• True

• False

Do not Call Registry lets you opt out of marketing messages made to your telephone, mobile phone or fax machine.           

• True

• False

It is necessary for organisations to immediately stop sending marketing messages to a recipient when the recipient has notified the organisation that they are registered with the DNC registry.

• True

• False

Organisation that breaches the DNC provisions in the PDPA is liable to a fine of up to $20,000 per offence.

• True

• False

The three steps to mitigate data breaches are, knowing what information you have, being aware of where it is stored and knowing how your data can be at risk.

• True

• False

Malware could be used on a compromised email account to spread more malware to all the contacts saved in the sender’s address book.

• True

• False

Personal data breaches, no matter the scale, can cause considerable damage to business operations, loss of resources, time, reputation and prosecution.

• True

• False