Front

What is a key measure an organisation should implement to comply with GDPR

Back

It should implement effective data security measures

Front

What action should be taken for data that is no longer required under GDPR rules

Back

Dispose of it appropriately

Front

What type of data should organisations collect and store under GDPR

Back

Only relevant data

Front

What is a requirement for the use of personal data under GDPR

Back

It must only be used for the specific purpose it was initially collected for

Front

What is the criteria for individuals requesting data access

Back

A clear process must be provided by the organisation for providing requested information

Front

What is the Importance of staff training under GDPR

Back

To ensure staff understand and follow new procedures

Front

What is the only condition allowed for transferring data to a third party under GDPR

Back

Data can only be transferred when permission has been granted by the data subject

Front

Where should an organisation display its data use policy?

Back

In appropriate places, such as the organisation’s website

Front

If organisations are wishing to use data for marketing purposes what should they do?

Back

Organisations must obtain explicit consent by the data subject

Front

What should organizations ensure for individuals regarding data storage consent?

Back

A straightforward method for individuals to withdraw consent at any time