Chapter 12- Confidential Info

Question 1

What are the three characteristics of confidential info

Answer 1

Public data

Corporate data- relevant details of customers, suppliers, products etc

Personal data- name, address, occupation, medical history

Question 2

What is a non disclosure agreement

Answer 2

Where an employee states they are aware they are working with confidential information and if a breach they can be dismissed

Question 3

What are the 8 Data Protection Act 1998 principles

Answer 3

Personal data shall be processed fairly and lawfully

2 personal data shall be obtained for one or more specified and lawful purposes

3 personal data shall be adequate and relevant

4 personal data shall be accurate

5. personal data shall not be kept longer than necessary
6. personal data shall be processed in accordance with the right of data subject
7. Appropriate technical and organisational measures will be taken out to protect said data
8. Should not be transferred out of the EU

Question 4

What are the 5 conditions to holding personal data

Answer 4

1 consent must have been given

2. Processing must be necessary for the performance of a contract

3 Processing must be necessary to comply with a legal obligation

4. Processing must be necessary for public interest
5. Processing must be necessary for the pursuit of legitimate interests

Question 5

For a breach of data protection act how much is the maximum fine

Answer 5

£500,000

Question 6

What are the 6 significant changes between GRPR and the DAta protection act

Answer 6

1, any business that suffers a data breach must notify their DPA within 72 hours

2- individuals now have a right to erasure and a right to data portability

3. Increased compliance burden
4. Larger fines. Significant breaches can result in fines of £17million of 4% or a firms annual turnover

Technical breaches £7.5 million or 2% of the annual turnover

Question 7

What are the 7 principles of storage for data

Answer 7

1. Restricted access
2. File saving and back up
3. Source documentation retention- in the event of a severe fire all data kept on. The business premises may be destroyed so original source data should be in a separate building
4. Protection against theft

5, copyright

6. Use of passwords
7. Secure storage and file disposal

Question 8

What must corporate data be protected from

Answer 8

Malicious alteration

Deliberate destructive acts

Industrial espionage

Question 9

Personal data must be protected from

Answer 9

Being used for blackmail

Unauthorised disclosure

Question 10

What is the computer misuse act 1990

Answer 10

Computer hacking

Unauthorised access to a computer with intent to commit a serious crine

Unauthorised modulation is computer material

Question 11

What is the internet if things

Answer 11

Involves communication and interferon between networked devices that relay info across the network (control temp, sense smoke, detect water from leaky pipes)