Data Protection Flashcards by neasa ni ogain

What does data protection in clinical laboratories refer to?

The safeguarding of patient information, test results, and sensitive data to ensure privacy, security, and compliance with legal and ethical standards.

How well did you know this?

Not at all

Perfectly

What is the General Data Protection Regulation (GDPR)?

The cornerstone of data protection, governing how we collect, store, and use personal information across the EU.

How well did you know this?

Not at all

Perfectly

When did the GDPR come into law?

In 2018.

How well did you know this?

Not at all

Perfectly

What are the enhanced data protection standards established by GDPR?

Stringent guidelines for how organisations collect, store, process and protect personal data of individuals with the EU.

How well did you know this?

Not at all

Perfectly

What are the consent requirements under GDPR?

Organisations must obtain clear and explicit consent from individuals for data collection and processing.

How well did you know this?

Not at all

Perfectly

What enhanced rights do data subjects have under GDPR?

Individuals have enhanced rights regarding their personal data, including access, correction, and deletion.

How well did you know this?

Not at all

Perfectly

What are data breach notification obligations under GDPR?

Organisations must notify authorities and affected individuals of data breaches within a specified timeframe.

How well did you know this?

Not at all

Perfectly

What does data protection by design and default mean?

Data protection measures should be integrated into the development of business processes and systems.

How well did you know this?

Not at all

Perfectly

What is the impact of global data transfers under GDPR?

Regulations on how personal data can be transferred outside the EU to ensure continued protection.

How well did you know this?

Not at all

Perfectly

What compliance and accountability requirements does GDPR impose?

Organisations must demonstrate compliance with GDPR and be accountable for their data protection practices.

How well did you know this?

Not at all

Perfectly

What penalties are enforced for non-compliance with GDPR?

Significant financial penalties and other sanctions can be imposed on organisations that fail to comply.

How well did you know this?

Not at all

Perfectly

What cultural shift has occurred towards data privacy due to GDPR?

A growing emphasis on the importance of data privacy and security among organisations and individuals.

How well did you know this?

Not at all

Perfectly

What is the global influence of GDPR?

GDPR has inspired data protection legislation and practices worldwide.

How well did you know this?

Not at all

Perfectly

What was the purpose of the Data Protection Act 1988?

To regulate the processing of personal data and protect individuals’ privacy.

How well did you know this?

Not at all

Perfectly

What is defined as personal data under the Data Protection Act 1988?

Any information relating to an identifiable person, such as names, addresses, medical records.

How well did you know this?

Not at all

Perfectly

What type of sensitive personal data was included in the 2003 amendment?

Information about health, race, religious beliefs, and criminal history.

How well did you know this?

Not at all

Perfectly

Who are considered data controllers?

Businesses, hospitals, laboratories.

How well did you know this?

Not at all

Perfectly

What responsibilities do data controllers have?

Ensuring that data is collected and used lawfully.

How well did you know this?

Not at all

Perfectly

What must data processors follow when handling data?

Strict security measures.

How well did you know this?

Not at all

Perfectly

List the eight data protection principles outlined in the Act.

Obtained & processed fairly
Used for specified, lawful purposes
Adequate, relevant, and not excessive
Kept accurate and up to date
Kept only for as long as necessary
Processed in accordance with individuals’ rights
Kept secure against unauthorized access or loss
Transferred outside the EEA only with adequate protection

How well did you know this?

Not at all

Perfectly

What is a Data Subject Access Request (DSAR)?

A legal right for individuals to access their data.

What rights did individuals have under the Data Protection Act?

Access their data
Correct inaccurate data
Object to data processing in certain cases
Have their data erased (if applicable)

Who was responsible for monitoring compliance with the Data Protection Act?

The Data Protection Commissioner (DPC).

What could organizations face if found in breach of the Data Protection Act?

Fines and enforcement actions.

The Data Protection Act 1988 was superseded by which regulations?

The GDPR and the Data Protection Act 2018.

Fill in the blank: The Data Protection Act 1988 was Ireland’s first national law designed to regulate the processing of _______.

[personal data]

7 key principles of GDPR

1. Lawfulness, fairness + transparency 2. Purpose limitation 3. Data minimization 4. Accuracy 5. Storage limitation 6. Integrity + confidentiality 7. Accountability (appoint a DPO).

Who oversees Data Protection laws in Ireland?

Data protection commissioner (Des Hogan) Information commissioner (Ger Deering)

What is data management?

The practice of collecting, keeping and using data securely, efficiently, and cost-effectively.

Key frameworks which are in place that guide data management (5)

1. legislation 2. Guidelines 3. National and local policies 4. Professionalism + ethics (COPCE) 5. Accreditation.

What does the Data Protection Act regulate?

The collection, processing, storage, use, and sharing of personal information ## Footnote It protects individuals' rights regarding how their personal data is handled.

What is one of the rights under the Data Protection Act?

Right to establish the existence of personal data ## Footnote Individuals can verify whether an organization holds their data.

What is the right of access to data?

Individuals can request access to their personal information ## Footnote This allows individuals to see what data is held about them.

What can limit access rights under the Data Protection Act?

Certain situations such as legal or public interest ## Footnote These limitations protect sensitive information.

Name one of the 8 principles of the DPA.

Fairly and lawfully processed ## Footnote This principle ensures data is handled transparently.

What is another principle of the DPA?

Processed for limited purposes ## Footnote Data should only be used for the reasons it was collected.

What does the principle of data adequacy, relevance, and not excessive mean?

Data must be adequate, relevant, and not excessive ## Footnote It should only contain what is necessary for its purpose.

What is required under the principle of accuracy?

Data must be accurate ## Footnote Organizations must take steps to ensure data is correct.

How long should data be kept according to the DPA?

Not kept for longer than is necessary ## Footnote This helps minimize risk of data breaches.

What does the principle of security entail?

Data must be secure ## Footnote Organizations must implement measures to protect data from unauthorized access.

What does the principle regarding transfers to other countries state?

Not transferred to other countries without adequate protection ## Footnote This ensures data remains protected when crossing borders.

What does the HSE Data Protection Policy outline?

Specific measures and responsibilities for handling personal data within the Irish healthcare system ## Footnote It bridges the gap between legal framework and everyday operations.

What is the purpose of the HSE Data Protection Policy?

Ensures compliance with GDPR, Data Protection Acts, and Freedom of Information Act ## Footnote It safeguards the confidentiality and integrity of personal data.

What does the HSE Data Protection Policy protect?

The rights of data subjects (patients, employees, and service users) ## Footnote It aims to uphold individual rights regarding their data.

What is one responsibility of HSE staff under the Policy?

Handle data securely and confidentially ## Footnote All staff are legally required to protect personal data.

What must staff follow regarding data protection?

Mandatory training on data protection and security ## Footnote This ensures staff are aware of their responsibilities.

For what purpose is personal data used according to the policy?

Only for its intended purpose (e.g., patient care, research) ## Footnote This helps maintain ethical standards in data usage.

What should be used where possible for reports or statistics?

Anonymized data ## Footnote This reduces the risk of identifying individuals.

Under what conditions can personal data be shared?

Only shared with authorized personnel ## Footnote Sharing is subject to patient consent or legal justification.

8 principles of DPA

Data must be 1. Fairly + lawfully processed 2. Processed for limited purposes 3. Adequate, relevant, and not excessive 4. Accurate 5. Not kept for longer than is necessary 6. Processed in line with your rights 7. Secure 8. Not transferred to other countries without adequate protection