HOTS Questions on Data Privacy Act

A university plans to install CCTV cameras in classrooms. Under RA 10173, what is the most appropriate requirement before implementation?

• Posting the university logo on each camera

• Securing the students’ and teachers’ consent

• Registering the cameras with the NPC

• Deleting recordings every 24 hours

A hospital outsources its patient database system to a private IT company. What role does the IT company play under RA 10173?

• Data subject

• Data controller

• Data processor

• Data custodian

An airline requests passengers’ medical history before boarding. Which principle of RA 10173 must the airline evaluate first?

• Data retention principle

• Proportionality principle

• Transparency principle

• Access principle

A bank emails customer statements without encryption. Which provision is directly violated?

• Security principle

• Access principle

• Accountability principle

• Data portability principle

An online shop requires customers’ marital status before checkout. Which principle is likely breached?

• Purpose limitation

• Data minimization

• Data quality

• Consent principle

Compare: A school asks for student consent to publish names in the yearbook. A company posts employee data online without consent. Which principle differentiates these scenarios?

• Data portability

• Transparency

• Legitimate interest

• Consent

A hospital discloses patient info to a pharmaceutical company without permission. Which is the root issue?

• Breach of proportionality

• Breach of confidentiality

• Breach of portability

• Breach of accountability

An employee accidentally sends client records to the wrong email. Which principle and accountability relationship is tested?

• Data portability and subject control

• Security and organizational accountability

• Transparency and subject accountability

• Retention and third-party accountability

A credit card company keeps customer records even after 15 years of inactivity. What issue arises?

• Data minimization

• Retention limitation

• Data quality

• Accuracy principle

A government agency insists on collecting social media passwords during job applications. Which analysis best applies?

• This ensures transparency and compliance

• This promotes accountability in hiring

• This is excessive and violates proportionality

• This safeguards organizational integrity