Quiz on Data Subject Rights

What is the primary law in the Philippines that protects the privacy of individuals in relation to their personal data?

• RA 10175

• RA 10173

• RA 10178

• RA 10179

Which government agency is responsible for enforcing the Data Privacy Act of 2012?

• National Telecommunications Commission (NTC)

• National Privacy Commission (NPC)

• Department of Information and Communications Technology (DICT)

• National Bureau of Investigation (NBI)

The right of the data subject to be informed refers to the right to be notified about what?

• Breaches in data security only

• How personal data is being processed

• The data protection officer's credentials

• None of the above

What right allows a data subject to access the personal data that a company or organization holds about them?

• Right to Rectification

• Right to Access

• Right to Erasure

• Right to Object

Under RA 10173, the right to object allows data subjects to:

• Refuse any form of data collection

• Disallow the processing of their personal data for marketing, sales, or profiling

• Delete their data instantly upon request

• Opt out of any service

If a data subject finds that their personal information is inaccurate or incomplete, which right can they invoke?

• Right to Rectification

• Right to Data Portability

• Right to Compensation

• Right to Object

The right to erasure or blocking, also known as the right to be forgotten, allows a data subject to request what?

• To modify their personal data

• To have their personal data deleted or stopped from being processed

• To change their email addresses

• To prevent data sharing only

Which right enables a data subject to receive their personal data in a structured, commonly used, and machine-readable format?

• Right to Access

• Right to Portability

• Right to Erasure

• Right to Data Accuracy

A data subject may file a complaint if their rights under RA 10173 are violated. To which body can this complaint be filed?

• Department of Justice

• National Privacy Commission

• Cybercrime Division of the NBI

• Human Rights Commission

What type of consent is required from the data subject before personal data can be collected and processed?

• Explicit and informed consent

• Implied consent

• Silent consent

• Assumed consent