Data Management

Question 1

What are the GDPR regulations?

Answer 1

General Data Protection Regulations

Question 2

How are the GDPR regulations implemented in the UK?

Answer 2

Implemented in the UK as the Data Protection Act 2018.

Question 3

What are the responsibilities for those using personal data?

Answer 3

• Used fairly, lawfully and transparently.
• Used for specific, explicit purposes.
• Used in a way that is adequate, relevant and limited to only what is necessary.
• That the info is accurate and where required kept up to date.
• Not kept longer than is necessary.
• Must be handled securely.

Question 4

What kinds of information have stronger legal protection?

Answer 4

Sensitive information such as race, ethnicity, political and religious beliefs, gender, health and sexuality.

Question 5

What rights does an individual have under GDPR?

Answer 5

The right to:

• Be informed about how your data is used.
• Access personal data.
• Have incorrect information updated.
• Have data erased.
• Stop or restrict the processing of your data.
• Data portability.
• Object to how your data is processed in certain circumstances.

Question 6

What process should be followed to find out what data is held about you?

Answer 6

1. Write to Data Protection Officer (DPO) or company secretary if no DPO.
2. 28 days to provided full copy of all data held.
3. Can extend up to two months if request is complex. Must inform of this within one month of request and explain why there’s a delay.

Question 7

When can data be withheld?

Answer 7

Data can be withheld if it relates to:

• prevention, detection or investigation of crime .
• national security or armed forces
• judicial or ministerial appointments

Question 8

How much does a request for information cost?

Answer 8

It is usually free, however can incur a cost of request is large or will take a lot of time and effort to process.