Flashcards Studio

RideNow, a Philippines-based ride-hailing app, collects at sign-up: full name, phone number, email, driver’s license number, and home location. The privacy notice states data will be used to provide ride services, improve platform functionality, and may be shared with affiliates to enhance safety features. Six months later, RideNow contracts TripInsights, a data analytics firm, to develop individualized rider profiles for targeted promotions, using only data already held by RideNow. A rider, Marco Reyes, objects, arguing the new use is a different purpose not originally disclosed and requires separate consent. RideNow contends the new use is within the original purpose because it helps improve services and qualifies as sharing with affiliates under the Terms. (a) Identify the General Data Privacy Principle at issue and state the controlling rule. (b) Classify RideNow’s roles as data controller or data processor with respect to TripInsights, and assess whether the processing complies with the principle identified in (a). (c) Assuming the processing is not within the original purpose, outline Marco's remedies under the Data Privacy Act of 2012 and potential penalties for RideNow.