Data Management

Question 1

What does the Data Protection Act 2018 do?

Answer 1

Main piece of legislation that governs the protection of personal data in the UK

UK’s implementation of GDPR.

Question 2

What is GDPR?

Answer 2

General Data Protection Regulations 2016

Question 3

What are the 8 individual rights under GDPR

Answer 3

1. Right to be ​informed​.
2. Right of ​access​.
3. Right to ​rectification​.
4. Right to ​erase​.
5. Right to ​restrict processing.
6. Right to ​data portability (to use for their own purposes).
7. Right to ​object​.
8. Rights to automated decision making and profiling (undertaken by insurance companies)

Question 4

What are the key requirements under Data Protection Act 2018 / GDPR 2016?

Answer 4

• Obligation to conduct data protection impact assessments for high risk holding of data.
• Rights to access what information is held on a person and to erase it.
• A data controller decides how and why personal data​ is processed and is directly
  responsible for GDPR.
• A new principle of ​‘data accountability’​ ensuring that organisation can prove that they comply with the regulations to Information Commissioners Office (ICO).
• Data security breaches​ need to be ​reported to the ICO within 72 hours​ where there is a loss of personal data.
• An increase in​ fines ​up to ​4% global turnover​ of the company or​ £20million​, whichever is greater.

Question 5

What is the Freedom of Information Act 2000?

Answer 5

• It gives individuals the right to access information held by public bodies.
• The public body must state if they hold information on the individual if they request it.
• The public body is required to supply the information in the format requested within 20
  days.
• It can charge for providing the information.

Question 6

What are the exemptions of the Freedom of Information Act 2000?

Answer 6

• Contrary to the GDPR requirements.
• It would prejudice a criminal matter under investigation.
• It would prejudice a person’s/organisation’s commercial interest.

Question 7

How can you ensure the security of data?

Answer 7

• Can be improved with firewalls, encryption and passwords.

- Understand how a Non-disclosure Agreement works.