Understanding GDPR Compliance and Rights

The video tutorial explains the General Data Protection Regulation (GDPR), which governs the collection, storage, and use of personal data. It defines personal data and outlines the roles and responsibilities of data controllers and processors. The tutorial emphasizes the importance of protecting personal data, the legitimate bases for accessing it, and the rights individuals have over their data. It also highlights the consequences of non-compliance with GDPR and advises on seeking support for data protection concerns.

What does GDPR stand for?

• Global Data Protection Rules

• General Data Privacy Regulation

• Global Data Privacy Rules

• General Data Protection Regulation

Which of the following is considered personal data?

• Public domain information

• Generic product data

• Company revenue

• IP addresses

Who is responsible for protecting the data collected by an organization?

• Data Controller

• IT Support Team

• Line Manager

• Data Processor

What should you do with personal data at work?

• Protect it like your own personal data

• Leave it out for everyone to see

• Ignore it

• Share it freely

What is a data processor?

• A software used for data analysis

• An individual who manages data

• An organization that processes data provided by others

• An organization that collects personal data

Under GDPR, when can personal data be accessed?

• Whenever needed

• Only by the data controller

• Without any restrictions

• Only if there is a legitimate basis

What is the most common basis for accessing personal data?

• Vital interests

• Consent

• Legal obligation

• Contract

What right do individuals have over their data?

• Right to sell their data

• Right to ignore data protection laws

• Right to have their data erased

• Right to hide their data

What should you do if you receive a request related to personal data?

• Delete the request

• Handle it yourself

• Ignore it

• Pass it on to the data protection officer

What is the maximum fine for non-compliance with GDPR?

• £1 million

• £10 million

• £17.5 million

• £25 million