PDPA 面试题与答案
问题 11. Explain the concept of 'Data Minimization' under PDPA.
Data minimization is the principle of collecting only the necessary personal data for the intended purpose and avoiding the collection of excess or irrelevant information.
Example:
When creating a customer registration form, only ask for information essential for providing the requested service, avoiding unnecessary details.
问题 12. What are the key principles of data protection outlined in PDPA?
PDPA emphasizes principles such as purpose limitation, consent, data accuracy, storage limitation, and accountability to ensure fair and lawful processing of personal data.
Example:
A company must clearly define the purpose of collecting customer data and ensure it is used only for that specific purpose.
问题 13. How does PDPA address the processing of sensitive personal data?
PDPA imposes stricter requirements for processing sensitive personal data, requiring explicit consent and providing additional safeguards to protect such information.
Example:
Health records and religious beliefs are considered sensitive personal data, and explicit consent is required before processing.
问题 14. What is the role of a Data Protection Impact Assessment (DPIA) in PDPA?
A DPIA is a risk assessment process that helps organizations identify and mitigate the risks associated with processing personal data, especially in high-risk situations.
Example:
Before implementing a new system that involves the processing of large volumes of personal data, a DPIA must be conducted to assess potential risks and safeguards.
问题 15. Explain the concept of 'Consent' in the context of PDPA.
Consent is the voluntary and informed agreement of the individual for the collection, use, or disclosure of their personal data. It must be specific, clear, and revocable.
Example:
Before subscribing a user to a newsletter, a website must obtain explicit consent by providing clear information about the content and frequency of the newsletters.
用户评价最有帮助的内容：