IHLS C3: Recap Part 3 (523X)

Section 25 of PDPA requires an organisation to

• Cease to retain its documents containing personal data.

• Return documents containing personal data to the owner.

• Send requests to the owner for data updates.

• Update data server with sophisticated technology.

Mr. Terry requested for incognito stay. How should FOA Garrett handle his request?

• Inform Mr. Terry that some services will not be available to him.

• Inform all departments of this request.

•  Inform all departments of this request and ensure all staff deny any knowledge about Mr. Terry.

• Inform the Head of Departments (HODs) of this request.

When is the duration for which an organisation can retain personal data under the Retention Limitation Obligation?

• 6 years from the date of personal data collection.

• 7 years from the date of personal data collection.

• No fixed duration of time for which an organisation can retain personal data.

• The duration of time an organisation can legitimately retain personal data is assessed on the standard of reasonableness.

The Personal Data Manager of Hotel Jazz keeps records of previous employees who left more than ten years ago. What must be done to ensure Hotel Jazz complies with PDPA guidelines?

• The previous records can be kept as long as needed as the records belong to Hotel Jazz.

• Get in touch with previous employees and get their updated information.

• Discard the previous records of old employees to prevent potential data breaches.

• Sell the old records to a data mining company so Hotel Jazz can earn some miscellaneous income.

The following statements state legal or business purposes for which retention of data by organisation is necessary EXCEPT for

• Personal data required for an ongoing legal action involving the organisation.

• Personal data is required for an organisation to carry out its business operations.

• Retention of personal data is necessary to comply with organisation's marketing strategies.

• Retention of personal data is necessary to comply with organisation's obligation under various laws and regulations that require retention of personal data.

Company X and Company Z will soon undergo a merger and the new company will shift its focus from selling medical equipment to research and development for medical equipment. Which of the following statements is TRUE?

• Records of employees who already left Company X and Company Z must not be migrated to the new data centre and must be discarded as the new company does not have legal or business reasons to keep them.

• Old and current employee records must be kept under lock and key.

• All employee records for Company X and Company Z can only remain on the respective company's data centre secured with appropriate technology.

• Records of employees who already left Company X and Company Z can be migrated to the new data centre as the new company has legal or business reasons to keep them.