22. An organisation such as a school holds personal data about you. The organisation:

• has to ask your permission to keep your data on their computer

• must delete the data when you leave

• must register with the Data Protection Registrar

• must register with the Local Authority

23. Which of the following is “personal data” which may be held about someone on the computer system of a supermarket?

• Their address

• The amount they spent last year at the supermarket

• Their loyalty card number

• All of the above

24. The Act which specifies the rules about collecting and holding personal data is called:

• the Criminal Misuse Act

• the Data Protection Act

• the Personal Data Act

• the Health and Safety Act

25. The law states that:

• only government organisations can hold personal data about you

• personal data held by an organisation must be protected from hackers

• personal data must be updated at least once a week

• all personal data must be held on paper

26. If someone suspects that a company holds inaccurate information about them:

• they have a right to see what data the company holds about them

• they can log on any time to find out what data is held about them

• they can correct the data themselves

• they can correct the data themselves

27. The law states that if a company holds personal data it must:

• keep the data secure

• keep the data accurate and up to date

• allow people to see what data is held about them

• all of the above

28. Which of the following data is considered to be “personal data” when held by a school:

• the school’s email address

• the number of pupils in the school

• the address of a pupil

• the average percentage a*-c grades at gcse gained by pupils last year

29. A “data harvesting tool” is:

• illegal software used to steal passwords

• software used to gather information about individuals

• a type of input device

• a type of virus

30. Organisations holding personal data are allowed to:

• sell the data to Chinese organisations

• keep the data for ever

• sell the data for research purposes after removing data from which individuals can be identified

• give the data to anyone who asks

31. When you enter personal details on social networking sites you should never:

• enter personal details of your friends

• upload photographs of yourself that you would not want everyone to see

• enter your address

• enter any of the above