Page 42 - QMS ORIENTATION NEW HIRE
P. 42

PRINCIPLES OF DATA PRIVACY ACT 2012









                                                                                            LAWFULLNESS AND
           TRANSPARENCY                          PROPORTIONALITY                                                                              ACCURACY
                                                                                                   FAIRNESS




              • The identity of the Data                • Collection of personal                   • When processing                            • Take reasonable measures to
                 Controller;                              information should be                       personal data, the                           ensure that data is accurate and,
              • The purpose of data                       limited to what is directly                 individual rights of the                     where necessary, kept up to date.
                 processing; and                          relevant and necessary                      data subjects must be                        The company should conduct
              • Third parties or                          to accomplish a specified                   protected. Personal data                     regular data quality reviews of its
                 categories of third parties              purpose.                                    must be collected and                        information databases, manual
                 to whom the data may be                                                              processed in a legal and                     records and systems to ensure that
                 transmitted.                                                                         fair manner.                                 they are adequate for processing






            DATA RETENTION                         LEGAL BASIS FOR                             INTEGRITY AND                                   LEGITIMATE
                    LIMITS                            PROCESSING                             CONFIDENTIALITY                                     PURPOSE




              •For the fulfillment of the               • The processing of                        • MMC shall process                           • Collection and processing of
              declared, specified, and                     personal information                       personal data in a                           information must also be
              legitimate purpose                           shall be permitted                         manner that ensures                          compatible with a declared and
              •For legal claims;                                                                      appropriate security of                      specified purpose
              •For Legitimate business                                                                the personal data
              purposes, which must be
              consistent with standards
              •In cases provided by law.
   37   38   39   40   41   42   43   44   45   46   47