It refers to an individual whose personal information is processed.​ ​ ​

There are three General Data Privacy Principles.

Which one requires that processing of personal data shall be made known to the data subject?

It is the right to be let alone.

This right allows you to manage your personal data in your private device, and to transmit your data from one personal information controller to another.

Anong karapatan ang pwede mong i-exercise para magreklamo kapag inaccess ng online lending company ang contacts mo sa iyong cellphone nang hindi mo alam?

Considering the purpose of the processing, you may exercise this right to have your incomplete personal data completed, including a means of providing a supplementary statement.

What is the exact date the DPA of 2012 was approved, signed, and passed into law?

BONUS QUESTION

As part of this month's celebration, we recently held and concluded Privacy Fair 2023 where we installed Privacy Booths at SMC Infra offices.

How many Privacy Booths were there?

The purpose of this right is to allow individuals to access their personal data so that they are made aware and can verify the lawfulness of the processing.

TRUE OR FALSE

If the data subject gave their consent to the processing but changes to the terms and conditions were implemented after, does the PIC need to get new consent?

You have the right to _____, suspend, or order the blocking, removal, or destruction of your personal information from the personal information controller’s filing system.

TRUE OR FALSE

Personal information processed for journalistic, artistic, literary, or research purposes is also covered by the DPA.

TRUE OR FALSE

Once the personal information is given to the PIC, the PIC becomes the owner of that personal information.

TRUE OR FALSE

While consent may not be required in certain instances, a privacy notice is required at all times in order for data subjects to be informed of the processing of their personal data.

This principle applies to parents of minors or their legal guardians, who are responsible for asserting their rights on their behalf.

He is the incumbent Privacy Commissioner of the NPC.

SMC Infrastructure Code of Conduct

It is the sanction imposed upon an employee who intentionally or willfully compromises the personal data of others.

It refers to any information from which the identity of an individual is apparent or can be reasonably and directly ascertained, or when put together with other information, would directly and certainly identify an individual.

This is the right to obtain from the PIC a copy of personal data in an electronic or structured format that is commonly used or allows further use by the data subject.

TRUE OR FALSE

Privacy Notice is equivalent to Consent.

TRUE OR FALSE

A criminal suspect is not allowed access to the personal data held about him by law enforcement agencies as it may impede an investigation.

TRUE OR FALSE

Just like any physical property, such as real estate, you can assign your rights as a data subject.

Which data privacy right can you exercise if you intend to get a usable copy of your personal health records for the use of other doctors you may like to consult?

BONUS QUESTION

In this month's KaalaMondays, what is the name of the character who joined a raffle contest, enticed by the chance to win a trip to Boracay?

TRUE OR FALSE

When business organizations give you sales materials about products and services, they must explicitly inform or remind you of your right to object.

When a data subject exercises this right, the PIC shall cease the processing of personal data, unless the processing falls under any allowable instances other than consent and legitimate interest.

You may exercise this right upon discovery and substantial proof that you object to the processing and there are no overriding applicable lawful criteria for processing.

TRUE OR FALSE

When a data subject exercises his right to rectification, the PIC shall ensure the accessibility of the new information only.

It refers to any freely given, specific, informed indication of will, whereby the data subject agrees to the collection and processing of personal information relating to him or her.

Sa aling stage ng Data Life Cycle dapat nakikita ng Data Subject ang Privacy Notice?

Who else can invoke your privacy rights as a data subject?

In case you want to close your social media account and leave the service, or simply feel like you’ve shared a lot of information about your life and want a backup of all your personal data, what right can you exercise?

TRUE OR FALSE

The right to data portability can only be exercised by the data subject if the processing is based on consent or contract.

TRUE OR FALSE

An individual’s personal data lives on even after his death. As such, they could still be subject to privacy violations whether intentional or otherwise.

TRUE OR FALSE

Consent may also be given on behalf of the data subject by an agent specifically authorized by the data subject to do so.

How many privacy rights are there in the DPA?

The NPC is an independent government body mandated to administer and implement the DPA, and to monitor and ensure compliance of the country with international standards set for the protection of personal information.

What does the acronym NPC stand for?

TRUE OR FALSE

The contact details of the Data Protection Officer must be visible in the Privacy Notice.

BONUS QUESTION

In this month's KaalaMondays, what is the name of the Personal Information Controllor who was hosting a raffle contest for a trip to Boracay?

TRUE OR FALSE

The name of the Data Protection Officer must be visible in the Privacy Notice.

TRUE OR FALSE

You have the right to access both new and retracted information about yourself when you exercise your right to rectification.

TRUE or FALSE

You are not allowed access to information about you as contained in communications between a lawyer and his or her client if such communication is subject to legal privilege in court.

TRUE or FALSE

Parents or guardians automatically assume the responsibility of protecting the privacy rights of minors under their care.

TRUE or FALSE

Whenever you have the chance, you may assert your right to object verbally, be it in person or via a phone call. To have it formally documented, however, you must execute a written request to the organization, addressed to its Data Protection Officer (DPO), and have it received.

It is a basic right that empowers you as a data subject to consider other actions to protect your data privacy and assert your other privacy rights.

Scenario:

The customer contacts an online service provider to request access to their personal data held by the company. The company denies the request, citing confidentiality concerns.

What privacy right did the company violate?

Scenario:

An employee requests access to their employment records from their former employer. The employer takes an unreasonably long time to respond to the request.

Did the employer violate a privacy right of their former employee?

TRUE or FALSE

A social media platform processes users' personal data for targeted advertising. The platform's users can object to this processing.

TRUE or FALSE

A patient wants his medical records to be erased from a hospital's database due to a privacy breach. The patient can exercise his right to erasure.