Font size
WorksheetsDATA PRIVACY-Q1
Total questions: 35
Worksheet time: 12mins
True
False
I'm playing on Roblox and another player tries to talk to me. I can tell him
My phone number
The name of my school
My age
My favorite cartoon
The processing of personal information shall be permitted only if the personal information is necessary and is related to the fulfillment of a contract with the data subject.
TRUE
FALSE
The processing of sensitive personal information and privileged information shall be allowed if it is necessary to protect the life and health of another person.
TRUE
FALSE
The personal information controller shall implement reasonable and appropriate measures to protect personal information against natural dangers such as accidental loss.
TRUE
FALSE
Personal information must be processed fairly and lawfully.
TRUE
FALSE
The processing of personal information is necessary if it will be used for scientific and statistical research.
TRUE
FALSE
The unauthorized processing of personal sensitive information shall be penalized by imprisonment.
TRUE
FALSE
Sensitive personal information refers to personal information about an individual’s race, ethnic origin, marital status, age, color, and religious, philosophical or political affiliations
TRUE
FALSE
Complete the title of the Data Privacy Act 0f 2012.
"AN ACT PROTECTING INDIVIDUAL PERSONAL INFORMATION IN INFORMATION AND _________________ IN THE GOVERNMENT AND THE PRIVATE SECTOR, CREATING FOR THIS PURPOSE A NATIONAL PRIVACY COMMISSION, AND FOR OTHER PURPOSES."
Management System
Collaboration System
Communication System
Privacy System
The National Privacy commision has the following functions, except:
Receive complaints
Impose a temporary or permanent ban on the processing of personal information
Ensure proper and effective coordination with data privacy regulators
Assist foreign companies doing business abroad to respond to foreign privacy
Personal information must be:
Processed fairly and lawfully
Accurate, relevant and necessary for purposes for which it is to be used
Adequate and not excessive
All answers are correct
The following are the rights of the data subject, except:
Right to be informed
Rights for reasonable access
Right to damages
Rights for false information
The following shows different ways on how Data Privacy Act is not followed, except:
Processing Personal Information under authorized access
Malicious Disclosure
Improper Disposal of Personal Information
Accessing Personal Information due to negligence
The following are considered sensitive information, except:
individual’s health
individual’s race
individual color
individual gender
The processing of personal information shall be permitted only when the following condition exist, except:
The processing is necessary for compliance with a legal obligation
The processing is necessary for the purposes of the legitimate interests
The processing of personal information is necessary if it is related to the fulfillment of a contract
The processing is necessary in order to respond to personal emergency
It refers to any information whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual.
Sensitive Personal Information
Personal Information
Privileged Information
The processing is necessary in order to respond to personal emergency
Any and all forms of data which under the Rules of Court and other pertinent laws
Personal information
Personal Information Controller
Private
Privileged information
It refers to a person or organization who controls the collection, holding, processing or use of personal information
Personal information
Personal Information Controller
Private
Privileged information
It refers to any operation or any set of operations performed upon personal information including, but not limited to, the collection, recording, organization, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure or destruction of data.
merging
sorting
operating
The government agency DICT, has an acronym of:
department of informative and communications technology
department of information and collective technology
department of information and communications Technological
The data subject shall have the right, where personal information is processed by electronic means and in a structured and commonly used format
right to be informed
right to correct
right to damaged
Student's data and educational records are private and protected Federal and State __________
Lawsuit
Order
Instruction
Check all of the following that ARE considered student educational records: Choose 3
Student Grades and Progress Reports
Immunization and Health Records
Attendance Records
Expenses for the day
Students and parents/caregivers may "opt-out" of student information being listed/shared in a school or district directory. This means: (Choose 2)
Student information/images may NOT be shared in any way
This may be for the student's safety and protection
If I don't know if a student has opted out, I am okay to share.
It is the student's responsibility to let me know this
Failure to protect student's data and privacy laws may mean:
Possible loss of position or employment
Student/Family may pursue legal action
Federal or State legal consequences
All of the above
Law for student data privacy means that all apps/websites that are used in class must be vetted by the district IT department before used in class (Ask before you App!)
True
False
Maybe
I don't know...
Grabbie received a request from a vendor to send some files containing Personal Data to his email address (instead of sending it to the usual corporate account). What Should Grabbie do?
Send the files to that personal email address because we have all the agreements in place.
Do not send the files to the personal email address. Grabbie should approach DPO for further advice.
Send the files, no worry our manager will support us. We are doing business here.
Grabbie had accidentally sent a file containing Personal Data of 10,000 customers to a group of unintended recipients. What Should Grabbie do?
Report this incident to DPO
File a police report
Tell the managers and IT team to take that back
You got a whatsapp from one of public officials you know and have good relation with, asking for aggregate data. Can you share the data with them?
No, we cannot share the data directly with them as it is personal data
No, we cannot share the data because we need to make sure with business first whether the data is alright to share and whether it is confidential or not. We further need to check to PA and DPO for clearance before sending the data
Grabbie was asked by her best friend to provide her boyfriend’s transactions and trip details which Grabbie has access to. What Should Grabbie do?
Tell her best friend the details verbally instead of sending such data over email. This way, no one knows!
Send it from our personal email and ask her best friend to promise not to tell.
Reject her best friend’s request
Grabbie would like to send surprise GrabFood meals to Grabbers whom she works closely with. Grabbie tried to get home addresses or phone numbers but Grab doesn’t list them on Workday. What Should Grabbie do?
Approach her colleagues directly for such Personal Data
Contact Pops to request for such Personal Data
ask one of her team, she would know
Grabbie is tasked to throw away 200 hardcopies files containing Employee’s and DAX’s documents. What Should Grabbie do?
Save the world! Grab should reuse, reduce and recycle paper products! Make paper trees, stationary holders, or sell it to the rag-and-bone man for that extra $. Oh wow, the possibility is endless.
Bring back.the papers home, give it to your niece its free drawing papers
Destroy the files using a paper-shredding machine, or engage a security disposal company to do the job.
You were asked to give 15 of Grab's DAX names by police force for the purpose of criminal investigation. However, they have not yet provided official letter to you.
What would you do?
Ask for the official letter and in parallel contact DPO, PA, and Safety
Say that we cannot give it to them at all without clear legal basis why they need it
Grabbie is tasked to lead a Marketing campaign, and is required to disclose DAX’s Personal Data to our vendors on a monthly basis for processing. What Should Grabbie do?
Approach Vendor Security for proper registration of vendors and Legal team to ensure that we have all necessary agreements in place. Approach DPO to ensure that we comply to the proper collection, use and disclosure of Personal Data.
Let’s execute the process. Create a Google Form, run the campaign and send the data to the vendor!
Ask the manager approval, it is one of his/her responsibility too
