After providing consent to the collection, use and disclosure of personal data, individuals are not allowed to withdraw their consent. Answer: True False

The EU General Data Protection Regulation contains (in Article 17) the right for a data subject to obtain from a controller erasure of her or his personal data. That means that if personal data are: (a) no longer necessary for the purpose for which they were collected, or (b) the data subject withdraws consent that had been given to the processing of data, or (c) the data subject objects to the processing (for example, processing her or his personal data for direct marketing purposes, or processing her or his personal data where there are no longer legitimate grounds that override her or his interests, rights and freedoms), or (d) the data subject is a child and personal data have been collected to offer online services to that child, the controller has the obligation to erase data subject’s personal data. Does the New Zealand Privacy Act 2020 offer individuals similar entitlements? Explain how an individual could claim under the Privacy Act 2020 the entitlement to erase her or his personal information held by the agency in those situations?

Failure to comply with general requirements for informed consent and documentation of informed consent may result in suspension of a study.A. TRUEB. FALSE

According to the General Data Protection Regulation (GDPR), which of the following rights are individuals entitled to regarding their personal data?  Group of answer choicesThe right to data portability.The right to have data sold to third parties without consent.The right to have their data processed without their knowledge.The right to have data stored indefinitely.

The following responsible data principles have widely informed global protection frameworks. Which one of these principles is described INCORRECTLY?a.Consent and choice – Individuals should have the choice and autonomy to freely decide whether and how their data is collected and utilized. They must be adequately informed and be free from coercion when making decisions about sharing their personal information.b.Accountability – Organizations bear responsibility for ethically, legally, and safely collecting, storing, and using data.c.Data minimization and purpose limitations: Data, especially personally identifiable data, should only be collected when it is necessary to achieve a defined outcome. It should not be used for other than its intended purpose, and should not be retained longer than is necessary for the stipulated purpose.d.Transparency – All data collected needs to be open, explicit, and honestly made available in the public domain to ensure adherence to this principle.

The purpose of the Personal Data Protection Act is to regulate the collection, use and disclosure of personal data by organizations.Answer: True False