Certified Information Privacy Professional – Asia (CIPP/A) — Question 20

Which of the following principles of the OECD guidelines and Council of European Convention principles does Singapore's PDPA incorporate?

Answer options

• A. Disclosures to third parties included in access requests.
• B. Additional protections for sensitive personal data.
• C. The ability to opt-out from direct marketing.
• D. The right of deletion of data on request.

Correct answer: C

Explanation

The correct answer, C, reflects the ability for individuals to opt-out of direct marketing, which is a key aspect of the PDPA. Options A, B, and D, while important, do not specifically represent principles that are incorporated into the PDPA as clearly as option C does.