BTEC IT Level 3 Unit 1 Chapter 23 - Legislation

What is the main purpose of data protection legislation?

• "To allow unlimited access to personal data"
• "To protect personal data from misuse"
• "To regulate internet usage"
• "To promote data sharing"

Which legislation primarily governs data protection in the UK?

• "Data Protection Act 1998"
• "General Data Protection Regulation (GDPR)"
• "Freedom of Information Act"
• "Computer Misuse Act"

What rights does the GDPR grant individuals?

• "Right to access their data"
• "Right to unlimited data storage"
• "Right to sell their data"
• "Right to delete all internet history"

What is a key requirement for organizations under GDPR?

• "No data breaches ever"
• "Report data breaches within 72 hours"
• "Store data indefinitely"
• "Only collect data from employees"

Which of the following is NOT a principle of data protection under GDPR?

• "Data minimization"
• "Storage limitation"
• "Consent for all data processing"
• "Data accuracy"

What is the penalty for non-compliance with GDPR?

• "No penalties"
• "Warning letter"
• "Fines up to €20 million or 4% of annual turnover"
• "Mandatory training for employees"

What does 'data subject' refer to in data protection legislation?

• "An organization that processes data"
• "A person whose data is processed"
• "A government body"
• "A data processing system"

How long should personal data be kept according to GDPR?

• "Indefinitely"
• "As long as needed for the purpose"
• "1 year"
• "5 years"

Who is responsible for data protection compliance in an organization?

• "Data Protection Officer (DPO)"
• "IT Department"
• "HR Department"
• "All employees"

What does the term 'data breach' mean?

• "Accessing data with permission"
• "Accidental loss or unauthorized access of data"
• "Data storage"
• "Data transfer"