Font size
WorksheetsPearson 1CP2 - 5.2 - Legislation
Total questions: 35
Worksheet time: 18mins
Identify 3 items below that constitute personal data.
Name or title
Age / D.O.B
Gender expression
Breakfast choice
Current year
What term applies to any information relating to an identified or identifiable living person?
Identify the type of data that is collected every time you post an update on social media, sign up for an online account, or use a web-based email service or a search engine.
personal data
private data
confidential data
Often, social media companies analyse the personal data of their users to...
Sell user data to third parties. This is common place and before advertising revenue this is often their largest source of income
Decrease user engagement as the personal data can be used to identify which users don't actively use certain features
Share personal data without consent, as you waiver any right when you sign up for an account
Social media websites will often use personal data such as your likes and recent viewing habbits in order to...
personalise content and advertisements
With your initial consent, your personal data can be...
encrypted to ensure it is safe in the event of a data breach
stored on a wide range of storage devices so the company has backups
sold to or shared with 3rd parties
deleted so you will never be able to access it
One type of personal data, routinely collected, that many people may not be aware of is...
Social Security Number data being used every time you apply for tax information or file your returns
Credit card data that has been stored by companies you recently bought products from
Biometric data such as your face being logged and stored by security systems e.g. surveillance
Medical history data that will be stored on a hospital system
Concerns over the safe / correct storage of peoples' personal data relates to...
Data confidentiality
Data insecurity
Data privacy
Data protection
Concerns over personal data falling into the wrong hands relates to...
data privacy
personal information
data security
data safety
What UK law relates to data privacy?
Data Storage Act
As well as the GDPR what other UK law protects personal data?
What organisation introduced the GDPR?
How many articles relating to the rights of individuals and the obligations of organisations are contained within the GDPR?
In relation to the gathering of personal data, what term relates to organisations being required to ask or the permission if they are going to collect and process an individual's personal data.
authorisation
What does the following mean about consent around personal data?
People must be able to say no. Organisations cannot require consent as a condition of using their services.
Consent must be freely given by the individual
What does the following mean about consent around personal data?
It should be made clear what data processing activities are being carried out with different pieces of information. For example, the use of email and IP addresses should require separate consent.
What does the following mean about consent around personal data?
The person knows the identity of the organisation, what data processing activities will be carried out, the purpose of the data processing.
What does the folloing mean in relation to the collection of personal data?
The individual the data relates to can withdraw their consent at any time
Right to be revoked
When visiting websites new users are often asked to consent to personal data being logged. In what form is this personal data usually stored?
How does the Data Protection Act 2018 refer to the individual who's data has been collected?
The operation of the data protection act is overseen by the...
The ICO (information comissioners office) can issue ??? if misuse of data or failure to comply has occured.
What is the correct term for personal data falling into the wrong hands?
Many organisations appoint an individual who oversees compliance with the GDPR and Data Protection act. This individual is referred to as...
What does the Data Protection Act 2018 state in relation to how data is processed?
Data can be processed without consent and doesn't require additional consent for it to be monetised
Data can be shared without limitations, this includes outside of the UK
Data can be stored indefinitely as long as consent is given at the time of collection
Data must be processed lawfully, fairly, and transparently
What does the Data Protection Act 2018 state in relation to how personal data must be used?
Personal data must be used for the specified and explicit purpose it was collected
Personal data can be stored indefinitely and can be used for a wide range of different purposes
Personal data can be used without consent provided a third party advocates for the data subject
What does the Data Protection Act 2018 state in relation to how correct personal data is?
What does the Data Protection Act 2018 state in relation to how long personal data can be stored?
Data should be stored for at least 10 years and then a decision must be made
Data should not be stored for longer than necessary
Data can be stored indefinitely, provided the data subject is alive
Data can be stored without any limitations, but must be destroyed in the event of death
What does the Data Protection Act 2018 state in relation to the data subject agreeing to have their data collected and stored?
What does the Data Protection Act 2018 state in relation to security?
Personal data must be processed securely, including ensuring security measures are in place against breaches
Personal data must be processed insecurely. It doesn't matter too much as they have already given consent, so they freely yeilded their details
Data should be shared without any security measures. This can be as simple as encrypting a USB memory stick to transfer data
Security measures are optional when handling personal data. It is important to not get fined but companies have no obligation in real-terms
The unauthorised access of computers and servers is called...
fracking
What aspect of the computer misuse act does the below relate to?
Using a computer to attempt to access a program or data to which you know you are not authorised.
Unauthorised login
Unauthorised access
Unauthorised intrusion
Which aspect of the computer misuse act does the below statement relat to?
Hacking into a computer in order to access personal details, with the intention of committing identity theft.
Unauthorised use of computer systems
Unauthorised access with the intent to commit further crimes
Unauthorised interception of communications
Unauthorised modification of computer material
What aspect of the computer misuse act does the below statement relate to?
Creating a virus and then plutting it onto someone else's computer.
Hacking into a computer with the intention to commit mischief
Sharing personal information online with the intention to profit from a third party
Intentional and unauthorised destruction of software and data
Intentional and unauthorised disruption of a computer network
What is the term that relates to behaving in a moral / correct way?
