C2 Legal and ethical

Which of the following is a data protection principle?

• Using data for any purpose

• Collecting all available data

• Keeping data forever

• Collected only for specific purpose

Answer explanation

This is a core data protection principle that requires that data is collected only for a specific, legitimate purpose, and not used for any other purpose without the consent of the data subject.

What is the principle that requires data to be kept only as long as is necessary?

• Lawful processing

• Accuracy

• Minimisation

• Storage limitation

Answer explanation

This principle requires that data is not kept for longer than is necessary for the purpose for which it was collected. This helps to ensure that data is not retained indefinitely, and is only kept for as long as it is needed.

What does the "right to be forgotten" refer to in data protection?

• The right to erase all personal data collected by a company

• The right to request access to personal data collected by a company

• The right to object to the processing of personal data by a company

• The right to have personal data deleted under certain circumstances

Answer explanation

The "right to be forgotten" is also known as the "right to erasure." This principle under the General Data Protection Regulation (GDPR) gives individuals the right to have their personal data erased under certain circumstances, such as if the data is no longer necessary for the original purpose of processing or if the individual withdraws their consent for processing.

What is the potential downside of not providing equal access to services and information?

• It may lead to a more diverse and inclusive society

• It may promote fairness and equality

• It may limit opportunities for certain individuals and groups

• It may increase access for everyone

Answer explanation

Not providing equal access to services and information can limit opportunities for certain individuals and groups, perpetuating inequality and discrimination. This can have negative effects on both individuals and society as a whole, including reduced economic growth, increased social tensions, and a less diverse and inclusive society.

What is the purpose of an acceptable use policy in an organisation?

• To restrict employees' freedom and creativity

• To ensure that employees have no access to the internet

• To define acceptable and unacceptable behaviors on company systems

• To allow employees to use company resources however they want

Answer explanation

The purpose of an acceptable use policy in an organization is to establish guidelines for the appropriate use of company resources, including computers, networks, and internet access. These guidelines outline acceptable behaviors and prohibited actions, such as accessing inappropriate content, downloading unauthorized software, or engaging in harassment or discrimination. By establishing these standards, organizations can promote a safe and productive work environment, protect company resources, and reduce the risk of legal liability.

Which of the following best describes the purpose and use of acceptable use policies in terms of monitoring?

• To monitor and control employees' personal activities during working hours

• To monitor and track employees' online behaviour outside of working hours

• To establish clear guidelines and expectations for employees' technology use

• To allow unrestricted access to corporate technology resources

Answer explanation

Acceptable Use Policies (AUPs) are an important tool for organisations to set clear guidelines and expectations for employees' technology use. They help to ensure that employees understand the appropriate use of corporate technology resources and the potential consequences of misuse. AUPs often include provisions for monitoring employees' technology use, but the primary purpose is not to control or restrict employees' personal activities. Instead, the monitoring is intended to ensure compliance with the policy and identify potential security risks or policy violations. By establishing clear guidelines and expectations, AUPs can help organisations maintain a secure and productive technology environment.