An independent RES exam study resource — not a Government website and not affiliated with the Council for Estate Agencies (CEA).Find My OrderHow to identify official CEA sources
← All data protection pdpa questions

The PDPA controls three actions — collect, use, disclose — each needing its own consent

A worked RES examination question on data protection pdpa, from our Paper 2 bank — with the rule it turns on, and why each of the four options is right or wrong.

Paper 2Lesson 3Data protection PDPAFree — no sign-up

The question

At a project launch, salesperson Nadia asks a visitor, Mr Tan, to pose for a photo with her, and he agrees. The next day, without asking him again, she posts the photo on her public Facebook page, tagged with his name, to advertise the launch. Mr Tan complains that he never agreed to appear in her advertising, and Nadia protests that he consented when he posed for the photo, so she assumed she was free to use it as she wished.

Consider the following statements.

  1. (i) Consent to collect personal data automatically includes consent to disclose it publicly.
  2. (ii) The PDPA governs the collection, use and disclosure of an individual's personal data.
  3. (iii) Mr Tan's agreement to pose for the photo amounts to consent to collect his personal data.
  4. (iv) Posting the photo publicly to advertise the launch requires separate consent to disclose.
  1. A. (ii) and (iv) only
  2. B. (ii), (iii) and (iv) only
  3. C. (iii) and (iv) only
  4. D. (i), (ii), (iii) and (iv)

The answer, and why

Answer: B

The rule. The PDPA controls three actions — collect, use, disclose — each needing its own consent. Consenting to a photo is consent to collect; publishing it to advertise is a disclosure that needs separate consent. Collect consent does not roll up into disclose consent.

Why B is correct. (ii) the three regulated actions, (iii) posing as consent to collect, and (iv) publishing needing separate disclose consent are correct. (i) is false — collect ≠ disclose.

The other options.

  • D adds the false (i), that collect consent includes disclose consent.
  • A drops (iii), the consent-to-collect point.
  • C drops (ii), the scope of the PDPA.

Exam note. Collect, use, disclose — three separate consents. A photo consent is not a publishing consent.

Want a full paper instead of one question?

The free half-paper is 20 questions with a Section B case study, explained to this same depth. The paid sets are ten full 80-question papers across Paper 1 and Paper 2, every figure checked against the current IRAS, CEA, HDB, URA and SLA position.

Looking for past-year papers? CEA doesn't publish them — here's what it does publish.

Independent study material. Not affiliated with or endorsed by the Council for Estate Agencies. No pass guarantee — for study use only.