APP 12 and 13: access to and correction of personal information

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. Which principle gives you the right to ask to see the personal information an organisation holds about you?

A APP 13

B APP 12

2. Which principle covers asking an organisation to fix personal information that is wrong?

A APP 13

B APP 12

3. Your gym has your old phone number on file. What should you do?

A Ask the gym to correct it under APP 13

B Ask the gym to show you your data under APP 13

4. You want a copy of the personal information a streaming company holds about you. Which request is this?

A An access request

B A correction request

5. True or false: an app developer should keep the personal data it holds accurate and up to date.

A False

B True

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1APP 12		AUPDATE address = new_address WHERE user_id = 42 (APP 13)
2APP 13		BRequest: Please send me a copy of the personal information you hold about me. (APP 12)
3Requesting access: a student asks a company to show them the data it has stored about them		CThis ignores APP 13. If personal information is wrong or out of date, the organisation must take reasonable steps to correct it when asked.
4Keeping data accurate: an organisation updates a record when it learns the details are out of date		DYou can ask an organisation to correct personal information about you that is wrong or out of date.
5Company: We will not show you your data. We own it, so you cannot see it.		EYou can ask an organisation to give you access to the personal information it holds about you.
6Student: My birth date is wrong in your system. Company: Too bad, we never change records.		FThis ignores APP 12. People have the right to ask for access to their personal information, and the organisation must usually give it.

Definitions

APP 12 and APP 13

Fill in the Blanks

Complete each line of code by filling in the missing parts.

// APP __: access to personal information

// APP __: correct personal information

IF request = "access" THEN ____ copy of record TO person END IF

IF request = "correction" THEN ______ record WITH newValue END IF

IF isWrong __ isOld THEN UPDATE record END IF

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A SET request TO 'access'

B CHECK identity OF person

C IF NOT identity_ok THEN

D SEND copy OF data

Question 2

A SET app TO 13

B SET purpose TO 'see my data'

C SEND request TO organisation

Question 3

A SET field TO 'phone'

B SET new TO '0412 555 010'

C SEND access request

Question 4

A RECEIVE correction request

B CHECK info is wrong

C IF info is wrong THEN

D IGNORE the request

Question 5

A RECEIVE access request

B SET reply_time TO 5 years

C SEND reply TO person

Answer Key

APP 12 and 13: access to and correction of personal information

Section A: Quick Questions

B — APP 12

A — APP 13

A — Ask the gym to correct it under APP 13

A — An access request

B — True

Section B: Match the Pairs

APP 12 → You can ask an organisation to give you access to the personal information it holds about you.

APP 13 → You can ask an organisation to correct personal information about you that is wrong or out of date.

Requesting access: a student asks a company to show them the data it has stored about them → Request: Please send me a copy of the personal information you hold about me. (APP 12)

Keeping data accurate: an organisation updates a record when it learns the details are out of date → UPDATE address = new_address WHERE user_id = 42 (APP 13)

Company: We will not show you your data. We own it, so you cannot see it. → This ignores APP 12. People have the right to ask for access to their personal information, and the organisation must usually give it.

Student: My birth date is wrong in your system. Company: Too bad, we never change records. → This ignores APP 13. If personal information is wrong or out of date, the organisation must take reasonable steps to correct it when asked.

Section C: Definitions

APP 12 and APP 13 — Rights to ask an organisation for access to the personal information it holds about you (APP 12) and to have it corrected if it is wrong or out of date (APP 13).

Section D: Fill in the Blanks

// APP 12: access to personal information

// APP 13: correct personal information

IF request = "access" THEN
  SEND copy of record TO person
END IF

IF request = "correction" THEN
  UPDATE record WITH newValue
END IF

IF isWrong OR isOld THEN
  UPDATE record
END IF

Section E: Spot the Error

C — A copy of personal information should only be sent once the person's identity is confirmed. The line should be IF identity_ok THEN, otherwise unverified people could get someone else's data.

A — Asking to see the personal information an organisation holds is covered by APP 12 (access). APP 13 is about correction, so the first line should be SET app TO 12.

C — The program is trying to fix a wrong phone number, which is a correction request under APP 13. It should be SEND correction request, not an access request.

D — If personal information is shown to be wrong, APP 13 says the organisation must take reasonable steps to correct it. The line should be UPDATE the record, not ignore the request.

B — Organisations must respond to an access request within a reasonable time, usually about 30 days. Waiting 5 years is not reasonable, so it should be SET reply_time TO 30 days.