General Data Protection Regulation (GDPR)

What is the primary purpose of the General Data Protection Regulation (GDPR)?

• To increase internet speed

• To protect user's data and keep it secure

• To promote software development

• To regulate online shopping

Which of the following is NOT a key principle of GDPR?

• Data must be stored securely

• Data should be shared publicly

• Data collected must be accurate and up-to-date

• Limiting the data collected to what is needed

What could be a consequence if an organization breaches GDPR?

• Receiving a reward

• Temporary or Permanent ban on data processing

• Free advertising

• Increased data allowance

Other than the obvious name, address, etc., which type of data would a doctor's surgery most likely store about their users?

• Loan applications

• Medical conditions/Allergies

• Religion

• School meals

• Appointments

What type of information would a school most likely collect?

• Debit/Credit card numbers

• Test results

• Bank details

• Loan applications

• Parent details

What is a possible consequences if sensitive information about a data subject (person who's data they have)?

• Lack of trust for the company / organisation

• People might leave or not use the company again

• Company may be fined

• There will be no consequencs

Which of these are recommended tips for businesses to comply with GDPR?

• Ignore user consent for data usage

• Have good knowledge about all the data held

• Prepare to deal with subject access requests in a reasonable time frame

• Provide sufficient staff training

What should businesses do to enhance data security against external threats?

• Decrease the number of staff with data access

• Limit data storage to non-digital formats

• Implement robust security measures

• Provide staff training on data security