Qurratu Syaza_BBL3014

From tutorial lesson today, we were given a task by the lecturer. In a group, we have to give our point of view regarding the assessment, evaluation and comment about a company given which our view must related to 9 principles of data protection. The 9 principles of data protection are

1. The personal data shall be collected fairly and lawfully.
2. Purpose of collection of personal data.
3. Use of personal data.
4. Disclosure of personal data.
5. Accuracy of personal data.
6. Duration of retention of personal data.
7. Access to and correction of personal data.
8. Security of personal data.
9. Information to be generally available.

• They did state that there is no limitation of collecting customer personal data. (principle 1)
• Disclosure of customer personal data to third parties like agents and hotel. (principle 4)
  
• They did not take any responsibility if there is a spam or phishing mail that need customer to update their personal data. (principle 5)