Data Management Flashcards
Name 5 of the 8 individual rights under UK GDPR?
- Right to be informed
- Right to access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data proportionality
- Right to object
- Rights to Automated Decision Making and profiling
What are the UK GDPR Principles?
That data must be:
1. Stored and processed lawfully
2. Collected for specified purposes
3. Accurate and up to date
What are the maximum fines for firms that breach the Bribery Act 2010?
Unlimited fines
What is the principle of an NDA? (Non-Disclosure Agreement)
A legally enforceable contract between two parties relating to sensitive information.
What would happen if an NDA was breached?
The party who was ‘harmed’ could take legal action and seek damages for any loss that incurred
Who is the UK GDPR regulator?
Information Commissioner’s Office (ICO)
What is the Data Protection Act 2018?
It is the ruling UK legislation regarding the protection of personal data
What was the effect of Brexit on EU GDPR?
UK GDPR is an adoption of EU GDPR following Brexit
What is the Freedom of Information Act 2000?
It gives individuals the right to access information held by public bodies
What is the difference between Personal and Sensitive Data?
- Personal data - think ‘every day data’ e.g. Name, Email address, Date of Birth
- Sensitive Data - think ‘private data’ e.g. Political Views, Religion etc.
What would you do if you found a data breach?
- Report to my IT Team
- Document what data and where it was breached
- Must report to the ICO within 72 Hours
What fines for there for firms who breached UK GDPR?
- 4% of turnover or
- £17.5m of turnover whichever is greater
