INFORMATION ASSURANCE (DATA PRIVACY) - FINALS EXAM

In 2012 the Philippines passed the Data Privacy Act 2012, comprehensive and strict privacy legislation "to protect the fundamental human right of privacy, of communication while ensuring free flow of information to promote innovation and growth."

Republic Act. No. 10173, Ch. 1, Sec. 2

your data is treated almost literally in the same way as your personal property

R.A. 10173

It has the most responsibility when it comes to protecting the privacy and rights of the data's subject, such as the user of a website

data controller

This simply processes any data that the data controller gives them

data processor

refers to an arrangement involving the disclosure of personal data by the controller to a third party

Data sharing

It is defined as any freely given, specific, informed indication of will, whereby the data subject agrees to the collection or processing of his or her personal data

Consent

Monitor and ensure compliance with the DPA, as well as the rules and regulations implementing its provisions

National Privacy Commission ('NPC')

The penalty when a business fails to act in accordance with the Data Privacy Law is minimum imprisonment of

one (1) year to the maximum of seven (7) years

to notify you if your data have been compromised, on time.

personal information controllers (PICs)

This agency tasked with administering and implementing the provisions of the act, which is headed by a Privacy Commissioner, assisted by two Deputy Commissioners

National Privacy Commission ('NPC')