ShieldUp2023: Assessment

What is considered personal information under the Data Privacy Act (DPA) of 2012?

• Only sensitive information

• Any information that identifies an individual

• Corporate information only

• Information stored in the cloud

Which of the following is an example of personal information?

• Which of the following is an example of personal information?

• Employee work schedule

• Customer's email address

• Publicly available business contact information

3. 
   In data privacy, what does the principle of data minimization refer to?

• Limiting the use of personal information to a specific purpose

• Collecting only the necessary data for the intended purpose

• Maximizing the amount of data collected for future use

• Storing data indefinitely

Under the DPA, what rights do data subjects have regarding their personal information?

• Right to unlimited access

• Right to erasure

• Right to sell their data

• Right to modify company policies

If a customer requests access to their personal information, how should the company respond?

• Ignore the request

• Comply within 30 days

• Request additional payment

• Share information publicly

What is the importance of having a privacy policy on Edamama's platforms?

• It is a legal requirement

• It ensures faster website loading

• It boosts sales

• It is optional

Which of the following is a recommended practice for securing customer data?

• Sharing passwords among employees

• Regularly updating security software

• Storing customer data in an unsecured database

• Allowing public access to customer records

When is a Privacy Impact Assessment (PIA) typically conducted?

• After a data breach

• Before implementing a new system or process

• Only for sensitive information

• Every five years

What is the primary goal of a Privacy Impact Assessment?

• To maximize data collection

• To identify and mitigate privacy risks

• To increase transparency

• To promote data sharing

In the event of a data breach, what is the recommended first step?

• Continue normal operations

• Notify affected individuals and the National Privacy Commission (NPC)

• Delete all affected data immediately

• Conduct an internal investigation