Understanding Data Protection

The video tutorial covers the essentials of data protection, explaining what personal data is and how it should be processed. It introduces key roles such as data subject, data controller, and data processor. The tutorial outlines data protection principles, emphasizing the importance of privacy notices and consent, especially for sensitive data. It discusses the necessity of data relevance, accuracy, and security, including global data handling. The rights of data subjects are highlighted, including access to data, correction of inaccuracies, and protection against automated decisions.

What is required for data to be considered personal data?

• It must be able to identify a living individual.

• It must include financial information.

• It must be stored digitally.

• It must be shared with third parties.

Who is responsible for deciding how personal data is processed?

• Data subject

• Data controller

• Data processor

• Data analyst

What is a privacy notice?

• A form that collects personal data.

• A notice that informs the data subject how their data will be used.

• A document that lists all data breaches.

• A contract between data processors.

Why is explicit consent needed for sensitive personal data?

• Because it requires greater care and protection.

• Because it is less frequently used.

• Because it is more prone to errors.

• Because it is more valuable.

What must be ensured when collecting personal data?

• It must be collected in large quantities.

• It must be relevant to the purpose and context.

• It must be shared with all departments.

• It must be stored indefinitely.

What should happen to data that is no longer needed?

• It should be archived.

• It should be sold.

• It should be securely disposed of.

• It should be ignored.

What is a key requirement for firms when sending data abroad?

• Data must be encrypted.

• Data must be converted to a different format.

• Data must be processed with the same standards as in the original country.

• Data must be sent via email.

What can a data subject do if their data is inaccurate?

• Ignore the inaccuracy.

• Share it with others.

• Delete it themselves.

• Request for it to be corrected.

What right does a data subject have regarding automated decisions?

• They can request a human review of the decision.

• They can automate the decision themselves.

• They can ignore the decision.

• They can request more automation.

What can a data subject do if a breach causes them distress?

• Request compensation.

• Share their data with others.

• Ignore the breach.

• Delete their data.