Font size
WorksheetsData Protection and GDPR Quiz
Total questions: 25
Worksheet time: 15mins
What is meant by personal data?
Any information that can identify a living individual.
Information that is only available to the government.
Information that is available to the public domain.
Only sensitive data about an individual.
The purpose of UK GDPR is to:
Promote data collection without limitations.
Protect the rights and freedoms of individuals related to their personal data.
Allow businesses to freely share personal data across borders.
Encourage data processing without consent.
What does the principle of lawfulness, fairness, and transparency in the GDPR require?
Data processing should be done based on clear, lawful grounds and in a transparent manner.
Data can only be processed if the individual agrees.
Data should only be processed during working hours.
Data should be used for financial gain.
What is the key principle of purpose limitation?
Data can only be collected for specific, legitimate purposes.
Data can be used for any purpose as long as the user consents.
Data should be stored indefinitely for any use.
Data should be used for purposes unrelated to its original collection.
Which of the following describes the key principle of data minimisation?
Collect only the data necessary for the specific purpose.
Collect as much data as possible to ensure accuracy.
Keep personal data for as long as possible.
Share all data with third parties.
The key principle of accuracy in data protection means:
What is meant by the key principle of storage limitation?
Personal data should not be kept longer than necessary for the purpose.
Personal data should be kept indefinitely for future use.
Data can be stored for any duration as long as it is encrypted.
Data should be stored only in physical formats.
The key principles of integrity and confidentiality mean that:
Data should be kept secure and protected against unauthorized access.
Data can be shared freely without restriction.
Only authorized personnel should have access to data.
Data should be encrypted for convenience.
What is the principle of accountability in data protection?
The data controller must ensure compliance with data protection regulations and be able to demonstrate it.
Accountability is only required for large companies.
Accountability means individuals must be held responsible for their personal data.
Accountability requires businesses to destroy data.
Which of the following best describes personal data under the UK GDPR?
Any data related to an identifiable individual.
Only financial information about an individual.
Data that has been publicly released.
Only sensitive information related to health.
Which principle requires that data be processed fairly and transparently?
Lawfulness, fairness, and transparency.
Data minimisation.
Purpose limitation.
Integrity and confidentiality.
Under UK GDPR, what does 'purpose limitation' mean?
Personal data must only be collected for specified, legitimate purposes.
Personal data can be used for any purpose as long as consent is given.
How does the principle of data minimisation protect individuals?
It ensures that only the necessary data for a specific purpose is collected.
It allows unlimited data collection for future use.
It allows sharing data freely among third parties.
It permits the use of excessive data if consent is provided.
What does the principle of accuracy require?
Personal data must be accurate and kept up to date.
Data accuracy is only required for financial transactions.
Data must be gathered quickly, without considering its accuracy.
Data accuracy is not a priority for businesses.
What does storage limitation mean in terms of personal data?
Personal data must not be stored longer than necessary for the intended purpose.
Data can be stored indefinitely if encrypted.
Personal data should be stored only on paper.
Data can be stored for unlimited periods if it is not shared.
Integrity and confidentiality refer to:
Protecting data from unauthorized access and ensuring it is accurate.
Ensuring all data is shared with third parties.
Encrypting only financial data.
Collecting data for internal use without restrictions.
Which principle of GDPR focuses on ensuring compliance with data protection regulations?
Accountability.
Accuracy.
Purpose limitation.
Lawfulness, fairness, and transparency.
What does the principle of lawfulness in data protection mean?
Data must be processed lawfully, fairly, and transparently.
Data must be processed based on the consent of the individual.
Data should be processed for financial purposes only.
Under UK GDPR, the principle of fairness means:
Data must be processed in a way that individuals expect and understand.
Data must be processed for any purpose, as long as it benefits the company.
Data can be processed without informing individuals.
Data processing is only fair when the individual consents.
Which principle of GDPR requires that personal data should only be kept for as long as necessary?
Storage limitation.
Accountability.
Data minimisation.
Integrity and confidentiality.
How does accountability affect businesses under the GDPR?
Businesses must be able to demonstrate compliance with data protection principles.
Businesses are only accountable for data shared with third parties.
Businesses must not collect personal data.
Accountability is only required for large companies.
What is an example of a lawful basis for processing personal data?
The individual’s consent.
The company’s desire to make a profit.
The data being available in the public domain.
The personal data being owned by the business.
What does the principle of transparency require from data controllers?
To inform individuals about how their data will be used.
To keep the data processing methods secret.
To share data with third parties without explanation.
To only process data if explicitly asked by individuals.
Which of the following is an example of data minimisation?
Only collecting a person's name and email address when they sign up for a newsletter.
Collecting as much data as possible during a registration process.
Why is the principle of purpose limitation important?
It ensures personal data is only used for the reason it was collected.
It allows businesses to use personal data for marketing purposes.
It permits the collection of unnecessary data.
It allows data to be used freely for any business need.
