Data Management

Question 1

What is the Data Protection Act 1998?

Answer 1

The data protection act governs the protection of personal data in the UK.

Question 2

What does the Data Protection Act 1998 do?

Answer 2

• It is designed to protect personal data stored on computers or in an organised paper filing system
• It controls the way in which data is stored and handled
• It gives rights to people that have data stored about them
• 8 freedoms, similar to GDPR

Question 3

What is GDPR?

Answer 3

General Data Protection Regulation

Question 4

What can you no longer do under GDPR?

Answer 4

@@@

Question 5

What are the rights of the individual under GDPR?

Answer 5

• to opt-in to information to sent to them
• the right to be forgotten (does not apply in certain situations e.g. legal)
• the right to know what information is held about me

There are 8 rights for individuals in total.

Question 6

Who is the GDPR regulator?

Answer 6

ICO - Information Commission’s Office

Question 7

What are the potential penalties under GDPR?

Answer 7

£20m or 4% of global turnover, whichever is the higher

Question 8

How would you respond if your company suffered a significant data breach?

Answer 8

Report it to the ICO within 72 hours from when it started

Question 9

How did your company prepare for the implementation of GDPR?

Answer 9

• • Training
• GDPR compliance officer
• @@@@@@@@@

Question 10

How would you protect the information you are sending to a third party?

Answer 10

• Send hard copy
• Encrypted information password protected
• @@@@@@@@

Question 11

When did GDPR come into effect?

Answer 11

2018 May

Question 12

What happens to GDPR if we leave the EU?

Answer 12

Nothing, it is part of UK law