Data Protection Act (1998) Plenary

What is the main purpose of the Data Protection Act (1998)?

• To allow free access to personal data

• To promote the sale of personal data

• To safeguard personal and sensitive information

• To encourage data sharing without consent

Which of the following is NOT a principle of the Data Protection Act?

• Data can be kept indefinitely

• Data must be accurate and up to date

• Data must be collected and used fairly

• Data must be kept safe and secure

Who is responsible for enforcing the Data Protection Act?

• The Data Subject

• The Information Commissioner

• The European Union

• The Data Controller

What must be ensured before transferring data outside the European Economic Area?

• The data is encrypted

• The receiving country has similar data protection laws

• The data is anonymized

• The data subject gives verbal consent

What concern might a data subject have regarding their personal information?

• Who can access it

• How much it costs to store

• Where it is physically stored

• How often it is updated