Data Management Flashcards
What is GDPR?
General Data Protection Regulations (2016) effective May 2018
It aims to create a singe data protection regime for the EU.
How is data protection legislated in the UK?
UK GDPR 2020
Data Protection Act 2018 implemented GDPR (2016)
Replaced DPA Act 1998
What are the principles under the Data Protection Act 2018?
- Used lawfully, fairly and transparently
- Collected for specified and legitimate purposes
- Accurate
- Retained for no longer than is necessary
- Processed securely including the protection against unlawful use, loss or destruction.
What are the 8 individual rights under GDPR?
- Informed
- Access
- Rectification
- Erasure
- Restrict Processing
- Data Portability (their own use)
- Object
- Automated Decision Making and Profiling (Insurance companies)
Who are the key persons outlined within GDPR?
Controller - Determine the purposes and means of the processing of personal data. (Employer)
Processor - Processes personal data on behalf of the controller. (Call centre)
Data Protection Officer - Oversees the data protection approach, strategy and its implementation. Leadership role required by GDPR (2016).
What are some changes brought about by GDPR?
Data Controller responsible for GDPR
Individuals can request what personal data is held and request it is deleted
Who is GDPR policed by?
Information Commissioners Office (ISO)
What do you know about forthcoming data legislation?
On 8 March 2023, the Government published the Data Protection and Digital Information Bill (2nd).
The New Bill looks to reform the current UK data protection framework comprising of UK GDPR, the DPA 2018 and the Privacy and Electronic Communications Regulations 2003.
Intended to make data protection legislation simpler for businesses to understand and implement.
What is the Freedom of Information Act 2000?
Primary piece of UK legislation controlling the access to official information
Allows an individual to request access to information held by a public body.
What are the timescales for requesting information under the Freedom of Information Act 2000?
20 working days in the requested format
A fee may be charged
What is personal data?
Under GDPR, Personal data is any information which is related to an identified or identifiable natural person.
What is a non-disclosure agreement?
NDAs are used to protect against the disclosure or sharing of any confidential data.
What is a subject access request?
SAR - demand that the individual be given all information that a company holds on them.
What is copyright?
A set of exclusive rights granted to the author or creator of any original work, including the right to copy which can be licensed, assigned or transferred.
What is meant by confidentiality?
Where information is provided, but is subject to confidence and not shared without permission.