Beta

Flashcards Studio

Practice bar questions and get clear AI feedback on every answer.

Study Settings View Stats

Topic

Question Type

Essay Multiple Choice

Question Source

All Jurisprudence based

0 tracked cards Political and Public International Law

TechTrust PH, a Philippine-based e-commerce platform, collects personal data of customers (names, contact numbers, delivery addresses, purchase histories) for order fulfillment and targeted promotions. Data are stored on TechTrust PH’s servers in Manila, but TechTrust PH contracts a cloud provider with data centers in Indonesia to host and analyze the data for marketing insights intended to be used for customers in the Philippines and across Southeast Asia. The data subjects are residents of the Philippines. TechTrust PH contends that RA 10173 applies only to processing within the Philippines and that cross-border processing is outside the Act’s scope. (a)Does RA 10173 apply to TechTrust PH’s cross-border processing? Identify the controlling scope rule and apply it to the facts. (b)If RA 10173 applies, classify the actors involved (controller vs. processor) and explain the scope-related obligations that arise for each in light of cross-border processing.

Choose the Best Answer

RA 10173 applies only if the offshore processor processes data in the course of business in the Philippines; since TechTrust PH is Philippine-based, its offshore processing still falls outside unless the processing is explicitly linked to PH offerings or monitoring. RA 10173 applies; the controlling scope rule is that processing of personal data of Philippine residents is within the Act’s scope even when processed abroad if performed by a Philippine-based data controller or processor or in connection with offering goods or services to Philippine residents or monitoring Philippine residents; the Philippine controller bears primary compliance obligations and the offshore processor is bound by contract and NPC oversight. RA 10173 does not apply to de-identified or aggregated data, and cross-border processing of such data would be outside the Act; therefore TechTrust PH’s data are not subject to the Act when anonymized. RA 10173 applies to all personnel data regardless of context, but certain marketing data may be exempt if anonymized before cross-border transfer.

Load another random question

Your Progress

No data Retention

Tracked Cards: 0
Accuracy: No data
Retained: 0

View Detailed Analytics

Difficulty Breakdown

Answer flashcards to build a real score-based difficulty breakdown.

Current Streak 0 Days

Start a streak with this card.

Suggested Decks

View All

Leech Cards

Review

No recent weak flashcards in your saved workbook.

More

Flashcards Studio

Question

Choose the Best Answer

Hello