Data Management L1

Question 1

What are the benefits of a cloud based storage system (4)

Answer 1

• Information is backed up on securely encrypted servers
• Documents and folder systems can be synchronised
• Multiple users can access the same document at the same time
• Cloud systems are environmentally friendly

Question 2

What is the meaning of a non-disclosure agreement (2)

Answer 2

• Used to protect against the discloure or sharing of confidential information
• Clients usually ask recipients of confidential information to sign a NDO

Question 3

If two separate departments in your firm were working for rival companies how would you ensure sensitive data was managed (4)

Answer 3

• Conflict of interest
• Separate working locations
• NDAs
• Secure storage

Question 4

Who are the key persons outlined within GDPR

Answer 4

• Controller
• Processor
• Data protection officer

Question 5

What does a controller do

Answer 5

• Natural person or legal entity that determines the purpose and means of processing data (E.G. the employer would be the controller when looking at employee information)

Question 6

What does a processor do

Answer 6

• Process information on behalf of the controller e.g. call centres acting on behalf of clients

Question 7

What does a data protection officer do

Answer 7

• Leadership role required by EU GDPR, companies need one when processing information of EU citizens. Oversees data protection approach

Question 8

What are the 8 individual rights under GDPR

Answer 8

• Right to be informed
• Right of access
• Right of rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Rights of automated decision making and profiling

Question 9

What does it mean to be GDPR compliant

Answer 9

• regulation that requires businesses to protect personal data and privacy of EU citizens for transactions that occur within an EU state

Question 10

What are the 7 principles of GDPR

Answer 10

• Lawfulness, fairness and transparency
• Purpose limitation
• Data minimisation
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Accountability

Question 11

What things must companies put in place to ensure GDPR compliance (4)

Answer 11

• Raise awareness across your business
• Audit all personal data
• Update your privacy note
• Review procedures supporting individuals rights