1.3.5 How legal issues protect computer users

What year was the General Data Protection Regulation (GDPR) established?

• 2015

• 2018

• 2020

• 2012

Which of the following is NOT one of the seven main principles of the GDPR?

• Flexibility

• Lawfulness, fairness and transparency

• Integrity and confidentiality (security)

• Accountability

What does GDPR emphasize about the processing of personal data?

• Data should be processed without any security measures.

• Data should be processed only by top management.

• Data should be processed securely using appropriate technical and organisational measures.

• Data should be processed manually without digital records.

According to GDPR, what additional control does it provide to data subjects?

• Control over the physical location of the data servers.

• Control over the way their personal data is processed.

• Control over the financial transactions of the data processing company.

• Control over the hiring practices of the data processing company.

What year was the Data Protection Act (DPA) enacted to address the increasing electronic processing of data?

• 1988

• 1998

• 2008

• 2018

According to the Data Protection Act (DPA) 1998, what must organizations ensure about the personal data they collect?

• Data must be shared internationally.

• Data must be collected and used fairly and lawfully.

• Data must be accessible to everyone.

• Data must be stored indefinitely.

Which principle of the DPA states that data should not be kept longer than necessary for the registered purposes?

• Accuracy

• Retention

• Adequacy

• Security

Under the DPA 1998, what is required of data before it can be transferred outside of the European Economic Area?

• The data must be encrypted.

• The data must be publicly accessible.

• The receiving country must have suitable data protection laws.

• The data must be deleted after transfer.

What is the primary purpose of the Data Protection Act (DPA) 1998?

• To promote international data transfers.

• To ensure data is used for entertainment purposes.

• To protect personal data processed electronically.

• To restrict the use of digital data completely.

What is the primary purpose of the Computer Misuse Act 1990?

• To regulate the use of personal data by corporations

• To protect against computer crime including unauthorized access and hacking

• To promote media literacy among users

• To oversee the use of investigatory powers by law enforcement