On Consent

The ToA is a document that will subsequently form part of your main contract with the University. Through it, you allow the University to collect and use your personal data for specific purposes, or in a particular way, or in certain instances, as indicated in the document. [back to top]
 

Both documents lay down lawful grounds for the University’s collection and use of your personal data. The main difference is that a Privacy Policy does not need your consent to become effective. Meanwhile, the ToA is just a piece of document if it does not contain your consent, as evidenced by your signature or some other indicator. Briefly, a Privacy Policy aims to inform, while a ToA seeks to obtain consent.

In terms of form, there is no prescribed format for a valid Privacy Policy. Consent, on the other hand, must either be in written, recorded, or electronic format in order to be valid. [back to top]
 

Under the DPA, there are times when the only available ground to process personal data is the consent of the concerned individuals. These instances are usually determined by the type of personal data or data processing activity that will be involved.

You can learn more about the lawful grounds for data processing by referring to Sections 12 and 13 of the DPA. [back to top]