Sample DPO Ace Questions

What is the right to privacy?

• The right to control information about oneself
• The right to receive information from others
• The right to freedom of speech

What is decisional privacy?

• The right to independence in making important decisions
• The right to be connected with others
• The right to control information about oneself

What is locational privacy?

• The right to independence in making important decisions
• The right to control information about oneself
• The right to freedom of speech

What is information privacy?

• The right to independence in making important decisions
• The right to control information about oneself
• The right to freedom of speech

What is the Data Privacy Act of 2012?

• An Act protecting government information
• An Act regulating the use of personal information
• An Act promoting the sharing of personal information

Who is subject to the DPA?

• Only juridical persons in the country and abroad
• Both natural and juridical persons in the country and abroad
• None of the above

What is the National Privacy Commission?

• A government agency tasked to regulate private entities
• A private entity tasked to monitor and ensure compliance of the country with international standards for personal data protection
• An independent body mandated to regulate private entities

What is the role of the Commission in terms of compliance and enforcement of the Data Privacy Act?

• Assisting Philippine companies doing business abroad to respond to data protection laws and regulations
• Undertaking necessary or appropriate efforts to inform and educate the public of data privacy, data protection, and fair information rights and responsibilities
• All of the above

What is transparency in data privacy principles?

• The processing of information must be adequate, relevant, suitable, necessary, and not excessive in relation to a declared and specified purpose
• A data subject must be aware of the nature, purpose, and extent of the processing of his or her personal data, including the risks and safeguards involved
• The determination of the appropriate level of security must consider the nature of the personal data to be protected

What is legitimate purpose in data privacy principles?

• Personal data shall be processed only if the purpose of the processing could not reasonably be fulfilled by other means
• The processing of information must be adequate, relevant, suitable, necessary, and not excessive in relation to a declared and specified purpose
• The processing of information shall be allowed, subject to compliance with the requirements of this Act and other laws allowing disclosure of information to the public