Five questions
The questions this case leaves open
These are educational questions, not accusations and not legal determinations.
Access
If an employee or processor is assigned to Product A, what information about Product B should they be able to access?
Read the PDPA explainerPurpose
Does lawful possession of information automatically permit its use in every interaction?
Read the PDPA explainerNecessity
How much personal information is actually necessary for the stated task?
Read the PDPA explainerEvidence
If the accuracy of a transcript is disputed, what evidence can verify it?
Read the PDPA explainerAccountability
When a complaint passes between a controller, processor, regulator and another authority, who owns the resolution process?
Read the PDPA explainer