Statement 1: Under the Rights of the Data Subject, data subjects are NOT NECESSARY to be informed about how they data are being collected and used.

Statement 2: Individuals HAVE THE RIGHTS to access their own personal data.

• Statement 1 is TRUE, while Statement 2 is False

• Statement 1 is FALSE, while Statement 2 is TRUE

• Both statements are TRUE

• Both Statements are FALSE

Statement 1: Data subjects have the rights to object in terms of processing their own data.

Statement 2: Considering essential factors, individuals can request to delete their own data.

• Statement 1 is TRUE, while Statement 2 is FALSE

• Statement 1 is FALSE, while Statement 2 is TRUE

• Both statements are TRUE

• Both statements are FALSE

Statement 1: Consent is required before processing personal information under the Data Privacy Act.

Statement 2: Sensitive personal information can be processed without consent if it is for research purposes.

• Statement 1 is TRUE, while Statement 2 is FALSE

• Statement 1 is FALSE, while Statement 2 is TRUE

• Both statements are TRUE

• Both statements are FALSE

Statement 1: The Data Privacy Act of 2012 was introduced to protect personal information in the Philippines.

Statement 2: The law mandates that organizations implement security measures for personal data protection.

• Statement 1 is TRUE, while Statement 2 is FALSE

• Statement 1 is FALSE, while Statement 2 is TRUE

• Both statements are TRUE

• Both statements are FALSE

Statement 1: Data subjects DO NOT have rights regarding access to their personal information under the Act.

Statement 2: Only private sector organizations are covered by the Data Privacy Act.

• Statement 1 is TRUE, while Statement 2 is FALSE

• Statement 1 is FALSE, while Statement 2 is TRUE

• Both statements are TRUE

• Both statements are FALSE

Statement 1: The Data Privacy Act allows for unrestricted sharing of personal data among affiliates without consent.

Statement 2: The law emphasizes transparency, legitimate purpose, and proportionality in data processing.

• Statement 1 is TRUE, while Statement 2 is FALSE

• Statement 1 is FALSE, while Statement 2 is TRUE

• Both statements are TRUE

• Both statements are FALSE

Statement 1: The Data Privacy Act aims to align Philippine data protection standards with international norms.

Statement 2: Organizations are NOT required to develop a privacy program under the Data Privacy Act.

• Statement 1 is TRUE, while Statement 2 is FALSE

• Statement 1 is FALSE, while Statement 2 is TRUE

• Both statements are TRUE

• Both statements are FALSE

Statement 1: Consent must be "freely given, specific, and informed" according to the Data Privacy Act's requirements.

Statement 2: Organizations can process personal data WITHOUT a legitimate purpose as long as they inform the data subject later on.

• Statement 1 is TRUE, while Statement 2 is FALSE

• Statement 1 is FALSE while, Statement 2 is TRUE

• Both statements are TRUE

• Both statements are FALSE

Statement 1: Organizations must implement appropriate technical and organizational measures to protect personal data against unauthorized access or misuse as per the law's requirements.

Statement 2: The NPC provides guidance and oversight on compliance with the Data Privacy Act to ensure that organizations adhere to its provisions and principles.

• Statement 1 is TRUE, while Statement 2 is FALSE

• Statement 1 is FALSE, while Statement 2 is TRUE

• Both statements are TRUE

• Both statements are FALSE

Statement 1: Organizations are allowed to sell personal data without consent if they provide a notice beforehand.

Statement 2: The NPC can impose penalties for violations of the Data Privacy Act, including imprisonment and fines.

• Statement 1 is TRUE while, Statement 2 is FALSE

• Statement 1 is FALSE, while Statement 2 is TRUE

• Both statements are TRUE

• Both statements are FALSE