VGU_Law and Data Protection_03 Total points Qe Oe tics What is your name? * Van Anh Thu What is your student ID? * 10421105 1. Whatis the right to rectification? * 5/5 O The right of data subjects to have their personal data sold to the highest bidder © The right of data subjects to correct inaccurate personal data a oO The right to have your data publicized oO The right to have your data take part in necessary scientific research X 2. The data subject has the right to be informed of * o/s the purposes of processing SY the categories of personal data being processed YS the recipients or groups of recipients, especially international we organisations or recipients located in third countries, to whom the personal data have been or will be disclosed the safeguards employed if personal data is transferred to a third We country or international organisation the planned storage period of the personal data or, if providing this \/ information is not possible, the criteria for defining the storage period the data subject's right to request the rectification or erasure of VS personal data concerning him or her, the right to restriction of processing of the personal data, and the right to object to such processing the right to lodge a complaint with a supervisory authority oS if the personal data was not collected from the data subject, all available information on the origin of the data and the possible use of automated decision-making (including profiling), and information relevant to the processing logic, the significance of the processing and its potential consequences for the data subject. Correct answer the purposes of processing the categories of personal data being processed the recipients or groups of recipients, especially international organisations or recipients located in third countries, to whom the personal data have been or will be disclosed the safeguards employed if personal data is transferred to a third country or international organisation information is not possible, the criteria for defining the storage period the data subject's right to request the rectification or erasure of personal data concerning him or her, the right to restriction of processing of the personal data, and the right to object to such processing a the planned storage period of the personal data or, if providing this the right to lodge a complaint with a supervisory authority if the personal data was not collected from the data subject, all available information on the origin of the data and the possible use of automated decision-making (including profiling), and information relevant to the processing logic, the significance of the processing and its potential consequences for the data subject. < 3. According to the General Data Protection Regulation (GDPR), *5/5 data subjects have the right: ag to obtain information on the processing of their personal data of access to their data g to rectification of their data Sa to the erasure of their data and to be forgotten to restrict the processing of their data 8 to data portability aa to object to the processing of their data STSPSISTSITSTSIS not to be subject to a decision based solely on automated Processing. < 4. The right to erasure does not apply if the processing of the *5/5 data is necessary for exercising the right of freedom of expression and information Ss for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller for reasons of public interest in the area of public health Ss for archiving purposes in the public interest, scientific or historical wea a research purposes or statistical purposes in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing or for the establishment, exercise or defence of legal claims Ss < 5. The controller must respond to the data subject without *5/5 undue delay and not later than in one month from receiving the request we two months from receiving the request three months from receiving the request CO00 © four months from receiving the request < 6. The right to restriction of processing exists in the following *5/5 cases: The data subject contests the accuracy of the personal data. Insuch \/ cases, the processing will be restricted for a period enabling the controller to verify the accuracy of the personal data. @ The processing is unlawful, but the data subject opposes the erasure ./ of the personal data and requests the restriction of its use instead. The controller no longer needs the personal data for the purposes of \/ the processing, but it is required by the data subject for the establishment, exercise or defence of legal claims. The data subject has objected to the processing of the personal data ./ for purposes other than direct marketing and is awaiting verification on whether the legitimate grounds of the controller override those of the data subject. K 7. If processing has been restricted, the controller must *5/5 the data subject before the restriction is lifted. © show © inform v © object © ignore Y 8. The right to object means in certain situations, the data *5/5 subject has the right to object to the processing of his or her personal data, that is, request the controller to slow down the processing to restrict the processing not to process it at all. wg O@®@OO0O to continue with the processing v9. Pros of “Right to be Forgotten”? * 5/5 @ Removing personal details that compromise your personal and ee financial safety An opportunity for a fresh start v The ability to remove libelous, embarrassing, and stigmatizing wa information from a past post or upload Self-determination of your online presence S The removal of illegally uploaded content by a third party a Peace of mind when applying for jobs v X10. An individual provides biometric information to a data *0/5 processor in order to log in to a certain program only. The processor later hands over the data for artificial intelligence processing for purposes of identification, reproduction, create a user's face, then the individual's information is misused compared to the original consent to use. In this case. a The controller has violated the principle of lawfulness, fairness and transparency The individual has the right to object the processing of It is fine and the controller can continue processing The individual has the right to restrict of the processing It is OK if the controller applogize the individual Correct answer The controller has violated the principle of lawfulness, fairness and transparency The individual has the right to object the processing Itis fine and the controller can continue processing v 11. A credit institution processes information provided by your = *5/5 former landlord whereby it is stated that you owe him 3 months’ rent. You have just won a legal dispute and his claim for the 3 months’ rent was ruled to be unfounded. You may: do nothing ask this institution to correct the data it holds about you so thatyou \/ aren't put at a disadvantage in the future when credit requests are processed. ask this institution not to remove your information ask this institution to pay compensation OO © O & 12.You are a member of an online social media network. You —_*5/5 decide that a new rival social media network is better suited to your aims and age-group. You can ask your current online social media network to transfer your personal data, including your photos, to the new social media network. This is: The right to be object the right to data portability f the right to be deleted OO0@O0O the right to be forgotten % 13. You subscribed to a loyalty card scheme of asupermarket *5/5 chain located in different parts of the city and throughout the country. If you use your right to ask for information about and obtain your personal information stored by the loyalty card scheme, you should receive information about, for example, how often you used the card, at which supermarkets you did your shopping, any discounts you were awarded and whether you were targeted through the use of profiling techniques, and in which way, whether the supermarket, which is part of a multinational chain of companies, has disclosed your data to its sister company selling perfumes and cosmetics. This is: The right to be object the right to be forgotten the right to data portability ®ooo the right to access oS x 14. You bought two tickets to see your favourite band play live *o/5 through an online ticketing company. Afterwards, you are bombarded with adverts for concerts and events that you're not interested in. You inform the online ticketing service company that you don't want to receive further advertising material. The company should stop processing your personal data for direct marketing. This is: © The right to be object © the right to be forgotten x © the right to access © the right to data portability Correct answer © The right to be object 15. You use an online bank for a loan. You are asked to insert —*5/5 your data and the bank's algorithm tells you whether the bank will grant you the loan or not and gives the suggested interest rate. You must be informed that you may express your opinion, contest the decision and demand that the decision made via the algorithm be reviewed by a person. This is the right to access the right regarding automated individual decision-making, including ./ profiling The right to be object O0o0@0 the right to be forgotten < 16. A female fashion model sued a newspaper because the *5/5 newspaper did not verified the information but posted articles about a clip of XXX which was actually from Korea found easily online. The articles make readers refer to this model. The article also attached this person's image, thereby causing misunderstandings for readers. The model won the case against the newspaper with an order to make correction, apology and compensation for damage caused by infringing honor, dignity and reputation. However, this information still exists on the Internet and online data storage platforms. In this case, the female model mentioned above wants to request Google to delete the data that remains on the network, what tight is it to exercise? the right to be forgotten se the right to access The right to be object O00 © right to restriction of processing S 17. The company introduce an app for purchasing online. *5/5 Permissions relating to data were not compulsory, and could only be found in the ‘Read More’ section of the app. Consequently, users were not informed what data the application was processing when downloading the app. In this case, what right of data subjects is violated? the right to be informed ov The right to be object the right to be forgotten COO0 © right to restriction of processing K 18. The right of access is an essential right, because ithelps —_*5/5 data subjects: @ To help them uncover why decisions were made and also expose iS. abusive data practices to enable them to know whether the datais accurate and whether \/ they want to take further action, such as exercising their right to object. to understand what data is being processed about them and how. a to enable them people to check whether their data is being processed 7 in line with the law and their expectations, XX 19. An individual believes that information held about themis — *0/5 inaccurate. They repeatedly request its correction to your company, but the company have previously investigated and told them that it is accurate. The individual continues to make requests along with unsubstantiated claims against your company as the controller. In this case, your company may refuse to rectify the information, on the ground that the request: © isnotnecessary © is manifestly unfounded © is rubbish x CO isirrelevant Correct answer © is manifestly unfounded ~ 20. A healthcare provider receives a request from a previous 5/5 patient to erase all of their personal data. However, the provider's liability insurance requires them to retain patient records in case of complaints or legal claims. The organisation can refuse the request to erase the individual's data, because is irrelevant is not necessary they are processing the data for the establishment, exercise or 1 defence of legal claims. O@®@oao0 is manifestly unfounded This form was created outside of your domain. - Terms of Service - Privacy Policy Google Forms