Font size
WorksheetsGDPR and data protection
Total questions: 9
Worksheet time: 2hrs 1mins
Some items of data are listed as Special category data. Can you pick the Special categories from the options below?
Religious Beliefs
Social Media Handle
Email address
Health Data
There are three types of person listed under GDPR; controller, processor and data subject. If you are working for the Council, using data we monitor, which category are you?
controller
processor
data subject
With the UK leaving the EU does that mean that we will not be affected by GDPR?
Yes, once we leave we will not need this regulation
No, we will remain affected by GDPR or follow up legislation
One of our learners contacts us and asks to have a copy of her records. Is it ok for us to ask for an administration fee of £10 to provide this?
Yes
Yes, as long as the fee is only nominal
No, you may no longer charge under GDPR
A new volunteer is signing up and is asked to provide his personal details, such as name, address, telephone and marital status. Would the volunteer be within their rights to refuse this?
Yes - not all of this is necessary for the purpose of volunteering
No - if they want to sign up they have to provide the information
Our enrollment form has a line which says "please tick here if you agree to your information being shared with third parties such as Ofsted" Will this need to be changed under GDPR?
Yes
No
Whenever you process personal data you must make sure you have a legal basis to collect and handle it. Can you spot the odd one out?
Processing because the law requires it
Processing because it will save time
Processing because the individual has agreed to it
Processing because you need to in order to carry out a contract
When managing requests for new courses it is important that we are wary of handling personal information. What must we do to avoid infringing any individual rights?
Include a privacy notice
Tell learners what data is held about them
Erase learners immediately details after their course
Tell learners how their data will be used
A laptop containing many learners details has been stolen. what do we need to do now?
Notify the relevant supervisory authority
Notify the individuals concerned if their rights or freedoms are at risk
Log the breach immediately with the ICT help desk
Make sure all staff keep a copy of their passwords only at their desk
