XYZ & Co., an Indian hospital specialized in dealing with cancer treatment has organized a free health checkup camp for women in a specific district, after seeking due permission from competent authorities. During the camp the hospital staffs will be feeding the medical records of these women into the computer connected to hospital network system. Does the said hospital need to notify its privacy policy to the women attending the camp and seek their consent regarding the collection and processing of such information?
With reference to APEC privacy framework, when personal information is to be transferred to another person or organization, whether domestically or internationally, ''the ______________ should obtain the consent of the individual and exercise due diligence and take reasonable steps to ensure that the recipient person or organization will protect the information consistently with APEC information privacy principles''.
If XYZ & Co. collects, stores and processes personal information of living persons, electronically in a structured filing system, then XYZ could be a:
Which of the following statements is true with respect to organization's privacy training and awareness program?
A non-public document issued by a data controller that directs data processors to adhere to certain privacy principles while processing personal information may be referred to as: