GDPR DPA and ID&V

Is this an example of correct ID&V process?

"Ok Mrs Muthiah, could I take your postcode please?"

"CV35 7YX"

"Thank you, and it is 35 Long Lane , isn't it?"

"Yes it is"

• Yes

• No

What does GDPR stands for?

• Generator Distributor Power Registration

• Genetic Disorders Prion Remission

• General Data Protection Regulation

• Genetic Data Processing Regulation

Jessie Ostrich recently relocated to the UK from Australia, he is not used to our addresses system and can't remember his postcode. Could you ask him for his date of birth to complete ID&V?

• Yes

• No

Which of the fallowing are principles of GDPR? (tick all that apply)

• Accuracy

• Security

• Storage limitation

• Purpose limitation

• Lawfulness, fairness and transparency

Mr McDonald is poorly, his daughter called on his behalf. She correctly confirmed name of her father and address details. Is it OK to discuss the account with her?

• Yes, she confirmed details

• No, she is not the account holder

• Yes, if she is listed as additional contact on the account

Mr Walnut calls and says he has a Power of Attorney over Jonathan Cashew. Can you discuss Mr Cashew's account with Mr Walnut?

• Yes, he said he has Power of Attorney

• Not until we receive a copy of POA document

Which of the following are correct ways of obtaining consent for processing data from a customer? (tick all that apply)

• tell individuals they can withdraw their consent

• use pre-ticked boxes

• use clear, plain language that is easy to understand

• default consent to opt in and then ask people to opt out

Landlord said he sent a letter giving him permission to discuss the account of the tenant. Can you discuss the account with him?

• Yes, as the letter is in the post

• No, the permission need to be given by the tenant

• No, we didn't receive the letter yet

Your manager ask you to give him your logins and passwords for time when you are off on holidays. Is this OK?

• Yes, in case he need to access my account to finish off my work

• Yes, he is my manager so I obey

• No, I cannot share my passwords with anyone

Which of the following is incorrect in regards to Data Access Request (Subject Access Request)?

• We have a one month to respond to the request

• Individuals have the right to access their personal data

• Individuals can make a subject access request verbally or in writing

• You cannot charge a fee to deal with a request in most circumstance

• We have an unlimited time frame to respond to the request