NEW
Font size
WorksheetsIHLS - Chapter 3 Revision
Total questions: 24
Worksheet time: 18mins
The newly opened Bronze Hotel is hosting a group of journalists. Mr. Bon Jovy, from BNN, refused to provide his passport for registration. What is the next appropriate step for FOA Caleb?
Out of goodwill, Mr. Bon Jovy can check-in without providing his passport since he is a powerful journalist.
Acknowledge Mr. Bon Jovy's request but decline his request to check-in until he provide his passport for registration.
Out of goodwill, Mr. Bon Jovy can check-in using his photo ID staff pass instead.
Inform Mr. Bon Jovy that passport is mandatory for check-in and assure him his details can be removed within reasonable time upon his request after he checks out.
A caller requests the home address of Mr. Howard, Hotel Shang's in-house guest. What should FOA Azman do?
Hang up the call as he is not suppose to reveal any in-house guests' details.
Explain to the caller that he is unable to disclose any information pertaining to guests.
Hang up after reprimanding the caller for requesting such sensitive information.
Acknowledge caller's request and verify with caller guest's full name before revealing the birthdate.
FOA Melissa will do an in-room check-in for a VIP who is attending a high-profile meeting. What is the appropriate step for FOA Melissa upon the arrival of the VIP?
Verbalize to the VIP his room number and show him to the room.
Verbalize the VIP's room number loud enough for the Bellman so he can send up the VIP's luggage to the room.
Point the room number on the key card holder to show the VIP his room number before escorting him to the room.
Point and verbalize the room number on the key card holder to show the VIP his room number before escorting him to the room.
FOM Kyle received an incognito stay request from an arrival guest, Mr. Richard. What is the immediate step FOM Kyle should take?
Inform all departments of Mr. Richard's incognito stay request & ensure all staff deny any knowledge about Mr. Richard when asked.
Inform his Front Office team of Mr. Richard's confidential stay request & ensure his Front Office team denies any knowledge about Mr. Richard when asked.
Inform Mr. Richard that due to his confidential stay request, some of the services will not be available to him.
Inform all departments of Mr. Richard's confidential stay request.
Crown Hotel will be hosting the royal family of Rajagopal. What should the management team of Crown Hotel do?
The management team should ensure no information regarding the stay is shared on social media.
The management team should alert their sister properties on Telegram about the arrival of the royal family.
The management team should ensure no information regarding the royal family is shared with external parties.
The management team should alert the media so they will receive great publicity.
Additional hotel key cards can only be issued to registered guests. What is the first step to determine if any individual requesting an additional key is indeed a registered guest?
Ask for written form of authorization.
Ask for their photo ID for verification.
Ask for the room no. and guest's name.
Ask for guest's name and their relationship with guest.
In what way does collecting guests' personal data help Crown Hotel customize users' experience?
Room can be done prepared based on availability.
All peanut products will be removed from guest rooms if the arriving guest is known to have a peanut allergy.
Room can be prepared on time.
Crown Hotel will be able to generate nationality report to compare with competitor hotels.
FOA Aliceis attending to a group of fans of the royal family of Rajagopal. They are demanding information about the royal family's whereabouts. What is the next immediate step for FOA Alice?
Hand over the matter to her Front Office Manager.
Deny any information about the royal family and refer the fans to the Front Office Manager.
Coax the fans to wait outside the hotel so they can get a glimpse of the royal family.
Call the police for nuisance.
Section 25 of PDPA requires an organisation to
Remove the means by which the personal data can be associated with particular individuals.
Return documents containing personal data to the owner.
Send requests to the owner for data updates.
Update data server with sophisticated technology.
Ms. Gilbert requested for incognito stay and also for the hotel to keep a lookout for a parcel under her name. How should FOA Garrett handle his request?
Inform Ms. Gilbert incognito stay is impossible for her since she is expecting a delivery.
Inform all departments of this request.
Check with Ms. Gilbert if the parcel will be under her name and if it is possible for her to have the parcel under an alias. Inform all departments of this request & ensure all staff deny any knowledge about Ms. Gilbert.
Check with Ms. Gilbert if she can keep a lookout for the parcel herself as she requested for incognito stay.
When is the duration for which an organisation can retain personal data under the Retention Limitation Obligation?
6 years from the date of personal data collection.
7 years from the date of personal data collection.
No fixed duration of time for which an organisation can retain personal data.
The duration of time an organisation can legitimately retain personal data is assessed on the standard of reasonableness.
The Personal Data Manager of Crown Hotel keeps records of previous employees who left more than eight years ago. What must be done to ensure Crown Hotel complies with PDPA guidelines?
The previous records can be kept as long as needed as the records belong to Crown Hotel.
Get in touch with previous employees and get their updated information.
Discard the previous records of old employees to prevent potential data breaches.
Sell the old records to a data mining company so Crown Hotel can earn some miscellaneous income.
The following statements state legal or business purposes for which retention of data by organisation is necessary EXCEPT for
Personal data required for an ongoing legal action involving the organisation.
Personal data is required for an organisation to carry out its business operations.
Retention of personal data is necessary to comply with organisation's marketing strategies.
Retention of personal data is necessary to comply with organisation's obligation under various laws and regulations that require retention of personal data.
Company A and Company B will soon merge and rebrand. Which of the following statements is TRUE?
Records of former employees of Company A and Company B must not be migrated to the new data centre & must be discarded as the newly merged company does not have legal or business reasons to keep them.
Former and current employee records must be kept under sophisticated lock system.
All employee records for Company A and Company B can only remain on the respective company's data centre secured with appropriate technology.
Records of former employees of Company X and Company Z can be migrated to the new data centre as the new company has legal or business reasons to keep them.
What does NRIC stand for?
National Register Identity Card.
National Registry Identification Card.
National Registration Indemnity Card.
National Registration Identification Card.
The new cinema requires John to write down his NRIC number when he purchases tickets. What should John do?
John should follow the cinema's instructions and share his NRIC number.
John should ask the purpose of taking down his NRIC no. and ask for an alternative instead of just giving his NRIC no.
John should seek an explanation from the cinema's manager.
John should just share his NRIC number in case he wins a lucky draw.
The following are the information stated on NRIC EXCEPT for
NRIC number.
Thumbprint.
Office address.
Photograph.
What is Personal Data?
Data about the individual, whether true or otherwise, kept by companies/organizations that can be used to identify the individual.
Data about the individual, whether true or otherwise, kept by individuals' friends and family that can be used to identify the individual.
Data is personal information about anyone kept by companies/organizations that can be used to identify the individual.
Data is financial information about anyone kept by companies/organizations that can be used to identify the individual.
Which statement is true about PDPA guidelines?
PDPA recognizes the rights of individuals to protect their personal data, including the rights of access and correction.
PDPA can be used to unlock information about an individual.
PDPA when mishandled can increase the risk of illegal activities.
PDPA is a unique identifier assigned to every business in Singapore once the business is registered.
In which year was the Personal Data Protection Act established?
2011.
2012.
2022.
2023.
The DNC Registry allows individuals to
Register their email addresses to opt out of receiving marketing emails.
Register their international telephone numbers to opt out of receiving marketing phone calls from organizations.
Register their Singapore telephone numbers to opt out of receiving marketing phone calls from organizations.
Register their Singapore telephone numbers to opt out of receiving personal messages sent by individuals.
Felix did not bring any form of identification when he wanted to subscribe to a new phone line. Will he be able to get his new phone line?
Yes, Felix can write down his identification number on the new phone line application form before he can formally subscribe to a new phone line.
Yes, no need for an identification number when subscribing to a new phone line.
No, as identification verification is required when subscribing to a new phone line.
No, but he may persuade the service provider to let his parents verify his identification via a video call.
Which of the following statements is true?
Organizations should generally not retain an individual's physical NRIC unless the retention of the physical NRIC is required by law.
The NRIC is a national identification document that is issued to all citizens and visitors of Singapore.
As a good practice, organizations should notify the individual of the purpose of collection, use, or disclosure of his or her NRIC.
Organizations may not collect, use, or disclose an individual's NRIC number without his/her consent, even if it is required under the law.
The PDPA takes into account the following concepts
Contest, Purpose, and Reasons.
Consent, Purposes, and Reasonableness.
Consent, Purpose, and Reasons.
Consent, Purpose, and Reasonableness.
