Employment Law - Module 5: Understanding Data Protection Law

What defines "personal data" under the Data Protection Act 2018?

• Any information stored on a digital device

• Any information associated with an identified or identifiable natural person

• Only financial information of individuals

• Only health-related information of individuals

Which of the following types of data can an employer keep about their employees without their permission?

• Medical history

• Name

• Personal hobbies

• Political affiliations

An employee has the right to be informed about:

• The salary details of their colleagues

• How their records are kept and used

• The company’s marketing strategies

• The CEO's private email address

According to the Data Protection Act 2018, how soon must an employer provide a copy of the information if an employee requests it?

• Immediately

• Within 7 days

• Within 30 days

• Within 60 days

What is one of the data protection principles that organisations must follow?

• Information can be used for any purpose

• Information must be kept indefinitely

• Information must be used lawfully, fairly, and transparently

• Information can be shared without restrictions

Under the Data Protection Act 2018, individuals have the right to:

• Erase their data without any conditions

• Access personal data

• Block all data processing activities globally

• Own all the data collected by any organisation

Who should an employee contact if they want to request their personal information from an organisation without a Data Protection Officer (DPO)?

• The CEO of the company

• The Data Protection Authority (DPA)

• The Secretary of the company

• The IT department

Which of the following is NOT a reason for which private data may be withheld?

• National security

• Prevention of crime

• Judicial appointments

• Employee salary negotiations

Which of the following is a right under the Data Protection Act 2018?

• Right to ignore data breaches

• Right to stop receiving marketing emails

• Right to restrict or stop the processing of your data

• Right to access all company records

An organisation must handle data in a way that ensures:

• It is publicly accessible

• It is never updated

• Appropriate security is in place

• It is shared with all employees