CIPP-A Exam QuestionsBrowse all questions from this exam

CIPP-A Exam - Question 23


Hong Kong's definition of a data user in the original PDPO applies to all of the following EXCEPT?

Show Answer
Correct Answer: B

The original PDPO (Personal Data (Privacy) Ordinance) in Hong Kong defines a 'data user' as a person who, either alone or jointly with others, controls the collection, holding, processing, or use of personal data. This definition includes trust corporations, private sector organizations, and limited liability partnerships, as they could potentially control the use of personal data. However, it does not include third-party processors, as they only process data on behalf of another entity and do not control the data themselves. Therefore, third-party processors are excluded from the definition of a data user.

Discussion

1 comment
Sign in to comment
BhimeshOption: B
Mar 31, 2024

Data User is a person who, either alone or jointly with other persons, controls the collection, holding, processing or use of personal data. Data user ( Controller ) Data Intermediary ( Vendor , Data processor ) The Data Intermediary is referred to differently depending upon the country or jurisdiction. In Singapore, it is data intermediary. In EU – the data processor, And in the United States / India – a data processor is typically referred to as a vendor, service provider or a third-party service provider

Bhimesh
Mar 31, 2024

A party who is only processing the data as agent for another person (a processor) is not a data user.