Data Management Flashcards
Legislation and effective date
GDPR
General Data Protection Regulations
Eff May 2018
Application of GDPR
Affects any company that trades with the EU, regardless of their location
Aim of GDPR
Provides people with more control over their personal data
Governed by?
Information Commissioners Office
Fine of breach GDPR
4% global turnover of company
€20mill
(Greater of)
Principles of data protection
6
Eg processing data in a fair and lawful manner
Ensuring data is collected for specified/legitimate purpose
Stored data should be accurate and up to date
Should be stored in a way that only identifies individual for duration of data processing
Ways to protect data
Password protected
Firewalls set up
Lawful bases for data processing under GDPR
Consent Contract Legal obligation Vital interest Public task Legitimate interest
Rights for individuals
8
Right to be informed Right of access Right to erase Right to restrict processing Right to object
Advantages of GDPR
Greater transparency
More accountable for protecting data
More control of personal data
Governed by law
MUST EMPLOY A DATA PROTECTION OFFICER
UK Data legislation
Data Protection Act 2018
What is DPA?
UK’s implementation of GDPR
Covers same as GDPR
How do you ensure data is reliable?
Triangulation
Freedom of info act
2000
Gives individuals the right to access info from public bodies
NDA
Non disclosure agreement
Ensures info is not leaked, maintaining confidentiality
