GDPR Flashcard for OPS

Front

Under GDPR, which of the following is NOT considered sensitive personal data? Employment history, Health information, Criminal records, Political opinions

Back

Employment history

Front

A medical report about a policyholder making a travel insurance claim is an example of special category data

Back

True

Front

A data breach includes an organisation accidentally deleting personal data.

Back

True

Front

You accidentally sent an email to the wrong recipient with an attachment containing personal data that was unencrypted. You quickly realise your mistake, but the email has been sent and cannot be recalled. What should you do?

Back

Report this to the data protection team at [e-mail]

Front

You are starting a new project that will involve the processing of personal data on a large scale. What is one of the first things you would do?

Back

I would speak with the data protection team for advice.

Front

A policyholder has requested that you supply a copy of their personal data held by MS Amlin. This is a Data Subject Access Request (DSAR). What is your next course of action?

Back

Create a zip file of all their personal data and share it with them

Front

A contract with a third-party vendor that processes MS Amlin personal data.

Back

Should include appropriate data protection and security provisions

Front

What is the main objective of conducting a Data Protection Impact Assessment (DPIA) before initiating new data processing activities?

Back

To identify and mitigate risks to data subjects

Front

Personal data can be kept indefinitely to ensure data availability

Back

False

Front

Under Data Protection Law, what must MS Amlin do if a data breach impacting many individuals and involving lots of special category data occurs?

Back

Notify the data protection authority within 72 hours