Question

1. A multinational pharmaceutical company collects personal data from its customers for the purpose of processing their orders and delivering medications. One of its customers, Mr. Santos, discovers that his personal information was accessed and used by an unauthorized third party without his consent. Mr. Santos believes that the company has violated his rights under the Data Privacy Act. Discuss the general data privacy principles under Section 11 of the Data Privacy Act and analyze whether the actions of the multinational pharmaceutical company constitute a violation of these principles.

2. XYZ Corporation is an online retail company that collects personal data from its customers, such as their names, addresses, and credit card information. The company recently suffered a data breach, resulting in the unauthorized access and disclosure of customer data. As a result, several customers experienced fraudulent transactions and financial loss. In light of this incident, discuss the general data privacy principles under Section 11 of the Data Privacy Act and evaluate whether XYZ Corporation can be held liable for the data breach and its consequences.

3. A social media platform has recently updated its privacy policy to include provisions that allow the platform to collect and share personal data of its users with third-party advertisers. Many users are concerned about their privacy and believe that the updated policy violates their rights under the Data Privacy Act. Examine the general data privacy principles under Section 11 of the Data Privacy Act and assess whether the social media platform's updated privacy policy complies with these principles.