Employers want to see that you have baseline awareness of the Data Privacy Act and that you won't inadvertently expose the company to liability through social media activations, even if you aren't the legal expert.
Demonstrate you understand key principles: transparency, purpose limitation, consent, and data minimization. Emphasize that you'd proactively involve legal or a privacy officer, not try to handle compliance alone.
Start by acknowledging that even a small giveaway falls under the Data Privacy Act, so you would treat it as a compliance exercise, not just a marketing task. Say plainly that your first move is to loop in your company's privacy officer or legal counsel before finalizing any mechanics, because they will know the specific consent templates and retention rules that apply. Then walk through the practical steps you would take: you would draft a clear privacy notice in plain Taglish or English that tells participants exactly what data you are collecting, why you need it, how it will be used, who will have access, and how long you will keep it before deletion. You would make consent explicit, not buried in fine print, and you would ensure the entry form has a checkbox that participants must tick, not a pre-ticked box. You would also limit collection to only what the giveaway truly needs, so if you do not need a birthdate, you do not ask for it. Finally, mention that you would set a deletion schedule after the winners are announced and prizes claimed, and you would confirm with your privacy point person that the data is stored securely, not on a personal spreadsheet or public document.
Saying 'Okay lang yan, basta may disclaimer lang tayo na "not responsible for data loss" sa mechanics.' But that doesn't comply with DPA. Instead, show you know the basics: 'We need to inform participants what data we're collecting, why, how we'll use it, and how long we'll keep it. I'd coordinate with our legal/privacy point person to ensure the consent language and data handling are compliant.'
Situation
At my last job with a consumer goods company, I was tasked with organizing a Facebook giveaway to grow our email list. The marketing head simply wanted us to collect names, emails, and phone numbers via a Google Form.
Task
I needed to execute the campaign while making sure we handled personal data responsibly and legally, without being the data privacy expert myself.
Action
Before launching, I initiated a meeting with our legal and compliance team. I asked them to review the mechanics for DPA compliance. I also suggested that the form state clearly what data we'd collect and why, and that we add a checkbox for participants to agree to our privacy policy. I made sure the collected data would be stored in a secure, access-restricted folder, not in a spreadsheet link anyone could access, and I planned to delete the file after the campaign and winner announcement, per legal's advice.
Result
The giveaway ran smoothly with 2,000 entries. Legal approved everything within a week, and we had zero data breach issues. The marketing team also appreciated that I flagged the need for privacy consent, which they hadn't considered.
Looping in legal early avoids privacy pitfalls that could damage brand trust.
Write your own answer, then get instant AI feedback graded against:
Get AI feedback on your answer — free.
3 free AI-graded answers + 1 free mock interview, no card needed.
Sign Up FreeAlready have an account? Log in
Sign in to join the conversation.
No answers shared yet — be the first to show how you'd approach this.
Undisclosed Sponsored Post Response
Social & Influence Manager
Splitting A Limited Social Budget
Social & Influence Manager
Campaign Growth And Measurement
Social & Influence Manager
Juggling Multiple Brand Voices
Social & Influence Manager