What does the Data Protection Act 2018 relate to?

• The implementation of the General Data Protection Regulation (GDPR)

• The creation of the Data Protection Act 2000

• The guidelines for internet usage

• The principles of data storage

Which of the following is NOT one of the data protection principles that must be followed when using personal data?

• Fairly

• Lawfully

• Secretively

• Transparently

How many data protection principles are mentioned in the material?

• One

• Two

• Three

• Four

What is one of the seven key principles of GDPR that requires explaining to people why their data is held, what will be done with it, and how long it will be kept before disposal?

• Data minimization

• Integrity and confidentiality

• Lawfulness, fairness and transparency

• Accountability

According to GDPR, what must be created before collecting any information from anyone?

• Data protection impact assessment

• Privacy notice

• Consent form

• Data processing agreement

What does the principle of 'purpose limitation' under GDPR imply?

• Data should be processed only for the purpose of storage.

• Data should be collected for unspecified purposes.

• Information must be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

• Data can be processed for any purpose as long as it is lawful.

What does data minimisation in GDPR refer to?

• Storing the maximum amount of data possible

• Collecting only the data that is not relevant to the purposes of collection

• Information must be adequate, relevant and limited to what is necessary in relation to the purposes of collection

• Keeping all data indefinitely, regardless of its relevance

Under GDPR, what is required for the accuracy of data?

• Data should be deleted immediately after collection

• Information held should be inaccurate and outdated

• Information held should be accurate and, where necessary, kept up to date

• Accuracy is not a concern under GDPR

What is the principle of storage limitation in GDPR?

• Data must be stored forever, without any time constraints

• Data must be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed

• Data should be stored in an identifiable form for ease of access

• There are no limitations on how long data can be stored

What should security measures be commensurate with according to GDPR principles?

• The cost of the data protection systems

• The sensitivity of the data held

• The number of people affected by the data

• The geographical location of the data storage