面试题与答案

The PDPA aims to safeguard the privacy of individuals by regulating the collection, use, and disclosure of their personal data.

Example:

For example, organizations must obtain explicit consent before collecting and processing personal information.

Individuals have the right to access their personal data, request corrections, withdraw consent, and be informed about the purpose of data processing.

Example:

A person can request a copy of their data held by an organization and request corrections if any information is inaccurate.

PDPA regulates cross-border data transfers by requiring data controllers to ensure that the receiving country provides an adequate level of data protection or by obtaining the individual's consent.

Example:

Before transferring customer data to an overseas branch, a company must assess and ensure that the destination country has sufficient data protection laws.

The DPO is responsible for ensuring an organization's compliance with PDPA, advising on data protection impact assessments, and acting as a point of contact for data protection queries.

Example:

A DPO may conduct training sessions for employees to raise awareness about data protection principles and practices.

Data minimization is the principle of collecting only the necessary personal data for the intended purpose and avoiding the collection of excess or irrelevant information.

Example:

When creating a customer registration form, only ask for information essential for providing the requested service, avoiding unnecessary details.

PDPA imposes stricter requirements for processing sensitive personal data, requiring explicit consent and providing additional safeguards to protect such information.

Example:

Health records and religious beliefs are considered sensitive personal data, and explicit consent is required before processing.

PDPA applies to the processing of employee personal data, and organizations must inform employees about the purpose of data collection, obtain consent, and ensure the security of the data.

Example:

An HR department collecting employee information for payroll purposes must obtain explicit consent and ensure the confidentiality of the payroll data.

Data portability allows individuals to request and receive their personal data from one organization in a commonly used, machine-readable format, and transfer it to another organization.

Example:

A customer switching to a different service provider can request their personal data from the current provider in a format that allows easy transfer to the new provider.