Data Protection Act Concepts

The video discusses the Data Protection Act (DPA) 1998 and its update to the DPA 2018, which aligns with GDPR. It covers key roles like data subjects, controllers, and the information commissioner, and explains data categories and principles. The video also outlines the rights of data subjects and provides exam board notes on answering questions in context.

What is the primary purpose of the Data Protection Act?

• To regulate the financial transactions of individuals

• To control how personal information is used by companies and the government

• To enforce tax laws

• To monitor the internet usage of citizens

Who is considered a data subject under the Data Protection Act?

• An organization that enforces data laws

• A company that processes data

• A person who has data about them stored outside their control

• A person who collects data

What role does a data controller play according to the Data Protection Act?

• They enforce the data protection laws

• They determine what data is collected and how it is processed

• They provide legal advice on data protection

• They store data on behalf of the government

Which of the following is considered sensitive data?

• Name and address

• Date of birth

• Political beliefs

• Bank details

What is a key difference between personal data and sensitive data?

• Personal data includes political beliefs

• Personal data is not protected by law

• Sensitive data includes financial transactions

• Sensitive data is subject to additional legal protections

What is one of the main principles of the Data Protection Act 1998?

• Data should be collected and used excessively

• Data should be kept indefinitely

• Data should be collected fairly and lawfully

• Data should be shared freely across countries

What right does a data subject have regarding inaccurate data?

• The right to delete the data

• The right to correct the data

• The right to sell the data

• The right to ignore the data

What was the aim of the GDPR introduced by the European Union?

• To focus solely on financial data

• To eliminate data protection laws

• To weaken data protection regulations

• To standardize and strengthen data protection across Europe

Which principle is newly emphasized in GDPR compared to the Data Protection Act?

• Data must be collected for unspecified reasons

• Data can be kept indefinitely

• Data must be processed in a secure manner

• Data controllers must prove their data protection measures

What is a potential consequence of not relating answers to the context in an exam?

• Receiving extra time

• Receiving no marks

• Receiving full marks

• Receiving partial credit