Certified Information Privacy Professional – Asia (CIPP/A) — Question 51

Which provision of Hong Kong's Personal Data (Privacy) Ordinance (PDPO) strengthens the purpose limitation principle (DPP3)?

Answer options

• A. Notice; because the data subject must be provided with the purpose of the collection.
• B. Public domain; because the data subjects must agree to the purpose before their information is made publicly available.
• C. Prescribed consent; because the data subject must give express consent to their personal information being used for additional purposes.
• D. Finality; because the purpose for collection of personal information from the subject must be directly related to a function of the collector.

Correct answer: A

Explanation

The correct answer is A, as it emphasizes the requirement to inform the data subject about the purpose of data collection, which is essential for ensuring transparency. Options B, C, and D, while related to data protection, do not specifically address the principle of purpose limitation in the context of how the data subject must be notified about the intended use of their data.