BTEC DIT C3 LAC - Data Protection

What aspects of data handling are regulated in the Data Protection Act? (Choose all that apply)

• Encrypting data

• Capturing data

• Processing Data

• Storing and protecting data

Identify the benefits of data protection. (Choose all that apply)

• Those who break the laws can face a fine or imprisonment.

• Data protection laws are difficult to enforce.

• Individuals now have rights over the data that organisations store about them.

• Conviction rates are low which indicates that organisations are breaking data protection laws without being prosecuted.

Identify the drawbacks of data protection. (Choose all that apply)

• Those who break the laws can face a fine or imprisonment.

• Data protection laws are difficult to enforce.

• Individuals now have rights over the data that organisations store about them.

• Conviction rates are low which indicates that organisations are breaking data protection laws without being prosecuted.

The penalties for an organisation that breaks data protection can be which of the following?

• A fine of up to 2% of the organisation's turnover, or up to €10 million.

• A fine of up to 4% of the organisation's turnover, or up to €20 million.

• A fine of up to 6% of the organisation's turnover, or up to €30 million.

• A fine of up to 8% of the organisation's turnover, or up to €40 million.

When were the newest Data Protection Act regulations introduced?

• 1988

• 1998

• 2008

• 2018

Which of the following statements was added to the regulations on capturing data in 2018?

• Data must only be captured for a specific purpose

• Data must be adequate and relevant

• Data must be accurate and kept up to date.

• It must be easy for data subjects to withdraw consent.

Which of the following statements was added to the processing data regulations in 2018?

• Data must be processed in line with the rights of data subjects.

• Data must be processed in a secure manner

• Data must be processed fairly and lawfully.

• Data captured for one purpose must not be used for a different purpose.

Which of the following statements was added to the storing and protecting data regulations in 2018?

• Data must not be kept for longer than necessary

• Organisations must take appropriate action to prevent unauthorised or unlawful processing of data.

• All data being stored about an individual should be anonymous, unless knowing the identity of the data subject in necessary to make sense of the data.

• Organisations must act to prevent accidental loss, destruction of or damage to data.

Information which is regarded as _________ is subject to stricter rules

• sensitive
• important
• additional
• dangerous

What does the term Data Subject mean?

• The person who stored the data
• The person who decides how the data will be used
• The person who controls the data
• The person who's data it is