Practice question
A controller says outsourcing data operations makes only its contractor responsible for privacy compliance. Explain the separate responsibilities in Section 14 and why a processing contract does not authorize unrelated use.
Legal references
- Republic Act No. 10173, Sections 3(b), 3(j), 11, 12, 13 and 14: https://lawphil.net/statutes/repacts/ra2012/ra_10173_2012.html
Answer this question in flashcards to review your response and continue practicing.