Page 50 - Mini-Module 9

Data users must follow the data protection principles which are discussed
26
below .
Principle 1: Purpose and Manner of Collection

This provides for the lawful and fair collection of personal data and
sets out the information a data user must give to a data subject when

collecting personal data from that subject.

Situation: Is searching a school bag of a student an improper
collection of personal data?

The ordinance covers only data that enables a user to identify the data
subject. Because cigarettes and comic books are not capable of

identifying any particular individual, there is no breach of the data
protection principles.

Situation: While performing counseling work, it is discovered that one
of the parents of a student has been imprisoned. How should the
school handle this data so as to properly protect the privacy of the
student while offering best help?

The data concerning the imprisonment of the parent is the personal
data of that parent. Therefore, this must be collected in a lawful and
fair manner, and the reason for collection the data must be provided to
the parent.

50