Quiz: Data Privacy Training

1. What should you do if you encounter a data breach?

A

Report it immediately

B

Ignore it if its minor

C

Follow the company's incident reporting procedures

D

Share the information with unauthorized individuals

2. Under the PDPA, organizations are permitted to use personal data for purposes not disclosed at the time of collection if it benefits the individual. Is this statement True or False?

A

True

B

False

3. Which of the following is considered to be under Biometric Information regarding one’s personal information?

A

Name

B

Favorite animal

C

GPS Location

D

Eye Color

4. Which of the following describes the definition of Personal Information?

A

Any information relating to an identified or identifiable person

B

Any information that contains financial information pertaining to an organisation, individual or asset

C

Any information that describes the actions of a person(s)

D

None of the above

5. What is the main purpose of the Transparency and Legal Basis to Collect Data principle?

A

Data must be stored on organization premise

B

Data must be collected for legitimate business purposes

C

Data must be processed and transferred efficiently

D

Data must be disposed when not required

6. When a data subject provides input to a form on a website, the form should NOT detail why the data is needed, to whom it will be shared with and how long it will be retained.

A

True

B

False

7. Under the Purpose Limitation principle, which of the following is a recommended practice under this principle?

A

A company must provide new notice and/or consent if it plans to use the data for a different purpose

B

The purposes and use of collected data should not be disclosed to the customer/user

C

A company need not share any future uses of collected data if they are not compatible with its original purpose for collection

D

The use of the data collected does not necessarily have to follow its disclosed purpose

8. Amongst which of the following is/are example of PII information?

A

Full Name

B

Social Security Number

C

Physical Address

D

All of the above

9. Under the Data minimisation, retention, and de-identification principle, how long should data be stored?

A

It should be retained no longer than is necessary for the specified legitimate business purposes

B

It should not be kept for a specified period of time that is disclosed to the user

C

It should be kept longer than intended or longer than the period specified to the data subject

D

All of the above

10. What is a basic difference between data privacy and data security?

A

Data privacy means personal information and data security refers to the process of protecting data

B

Data privacy refers to the process of protecting data and data security means personal information

C

Both A and B

D

None of the above mentioned