Data Management

Question 1

What are the 7 principles of GDPR?

Answer 1

1. Lawfulness
2. Purpose limitation
3. Data minimisation
4. Accuracy
5. Accountability
6. Confidentiality
7. Storage limitation

Question 2

What are the levels of fines / sanctions for failing to comply with GDPR?

Answer 2

Lower level: 10 million euros or 2% of annual turnover, whichever is highest.
Higher level: 20 million euros or 4% of annual turnover, whichever is highest.

Question 3

How would you deal with confidentiality if you were to send data overseas?

Answer 3

Once data is sent to an overseas location they become the data owners. To avoid this I would recheck all recipients of emails I am sending, not send sensitive data or confirm with the client or information owner that it’s OK to send data. Also check local laws.