2. OUT LINE OF THE REPORT
INCLUDING AN CASE/EXAMPLE
The Right to be Informed
The right to Object
The right to Access and Data
Portability
The Right to Rectify
The Right to Erasure or Blocking
The rights to Damages and to file a
Complaint with the NPC
6. Imagine that you just bought an MP3 player. The first time you play
it, you do not hear a sound. The good news is that you have rights as
a consumer. These rights protect you when a product is defective.
CONSUMER RIGHTS AND
RESPONSIBILITIES
7. THE RIGHT TO BE
INFORMED
As a consumer, you have a right to receive accurate information.
Consumers can make wise decisions only if they have the
information they need. Businesses are required to provide certain
details about their products.
8. Responsible consumers know what they are buying.
Product labels can tell you how much salt, sugar,
fat, or protein a product contains.
THE RESPONSIBILITY TO
BE INFORMED
9. EVERY ACCUSED HAS AT LEAST
THE FOLLOWING RIGHTS:
To be informed, as soon as possible, in a
language that he/she understands and in
detail, of the nature and cause of the
accusation made against him/her.
To have the time and facilities necessary for
the preparation of his/her defense.
13. When business organizations give you sales materials about
products and services, they must explicitly inform or remind you of
your right to object.
DIRECT MARKETING
PURPOSES
15. In technology-driven industries, such as banking
and finance, many decisions affecting individuals
are arrived at electronically via automatic data
processing systems based on personal information
stored in computerized data files.
AUTOMATED
PROCESSING PURPOSES
16. HOW TO EXERCISE YOUR RIGHT
TO OBJECT?
Whenever you have the chance, you may
assert your right to object verbally, be it in
person or via a phone call.
18. Once someone has given you their consent to use
their personal data, they also have the right to
access it.
THE RIGHT TO ACCESS
AND DATA
PORTABILITY
20. A request to transfer your data should be addressed to the
controller (the organization/entity/administration/company
processing your data).
IDENTIFY WHERE TO
SEND YOUR REQUEST
21. DRAFT YOUR
REQUEST
Inform the controller that you are asking for the transfer of
your data and where you want them to be transferred
Specify your name or other identifier used by the controller
Include the date in the text if you put your request in an
attachment to the email or in a letter.
1.
2.
3.
22. Once the controller receives your request, it has
one month to respond. This period can only be
extended once by a maximum of two further
months, in cases of complex or multiple requests.
CONTROLLER RESPONSE
26. Banking institutions are accountable for the different
transactions of a client, and thus held responsible for the success
of its delivery.
TRANSFER OR PAYMENT
IN BANK AND OTHER
REMITTANCES
27. REMOVAL OF PERSONAL
DATA INFORMATION
A historic court case over the publication of an obscene image of a
Northern Irish 14-year-old girl on a Facebook shame page was
settled on Tuesday, January 9th, 2018.
28. HOW TO EXERCISE YOUR RIGHT
TO RECTIFY?
State clearly what you believe is inaccurate
or incomplete.
Explain how the organization should
correct it.
Provide evidence of the inaccuracies.
Can be done verbally, whether in writing,
speaking, or via phone call.
1.
2.
3.
4.
30. Consent means permission but data subjects also
have the right to withdraw their consent at any
time.
THE RIGHTS TO
ERASURE OR BLOCKING
31. CASE
CASE
In several cases, the need to balance
this right with the freedom of
expression and public interest has
been highlighted.
32. Execute a written request to the organization, addressed to its
Data Protection Officer (DPO), and have it received.
HOW TO EXERCISE YOUR RIGHT
TO ERASURE OR BLOCKING?
34. At the extreme end of the spectrum, if damages are
done to the data subject, he has the right to file for
damages as well as escalate matters with the National
Privacy Commission.
THE RIGHT TO DAMAGES
AND TO FILE A
COMPLAINT WITH THE
NPC
35. CASE
CASE
For example a government employee
resigned from her agency with a
period with premium payments of
20.49 years. The employee’s birth date
indicated in her Government Service
Insurance System.
