Data Protection Act 2018 Quiz

The Data Protection Act 2018 aligns the UK's data protection framework with which regulation?

• GDPR (General Data Protection Regulation)

• PCI DSS (Payment Card Industry Data Security Standard)

• PECR (Privacy and Electronic Communications Regulations)

• COPPA (Children's Online Privacy Protection Act)

Which of the following is considered personal data under the DPA 2018?

• Job title

• Birth year

• Phone number linked to an individual

• Public city population statistics

The Data Protection Act 2018 establishes how many principles for data processing?

• 5

• 7

• 10

• 12

According to the DPA 2018, what is the maximum fine that the Information Commissioner's Office (ICO) can impose for the most serious data breaches?

• £500,000

• £10 million

• £17.5 million or 4% of global turnover

• £50 million

Which of the following is NOT one of the principles under the Data Protection Act 2018?

• Data minimisation

• Accuracy

• Data portability

• Accountability

Under the Data Protection Act 2018, an individual has the right to request access to their personal data. This is known as a:

• Data minimisation request

• Right to be forgotten

• Subject access request (SAR)

• Consent withdrawal request

Who within an organisation is responsible for ensuring compliance with the DPA 2018?

• CEO

• Data Protection Officer (DPO)

• IT Manager

• Marketing Manager

If an organisation experiences a data breach, how soon must it report this to the Information Commissioner's Office (ICO) in most cases?

• 24 hours

• 48 hours

• 72 hours

• 1 week

If an individual requests their data to be deleted under the right to erasure, an organisation may refuse the request if:

• It no longer uses the data

• The data is needed for compliance with a legal obligation

• The data relates to marketing activities

• The data is stored in a physical format