Data Protection

Question 1

What was the initial data protection concern?

Answer 1

The concern in the 60s was that databases could be used to compromise individual privacy.

Question 2

In 1972 what 3 areas of concern did the Younger Commission identify?

Answer 2

1) compiling personal profiles on single databases;
2) data matching across multiple databases;
3) unauthorized access to personal information

Question 3

What is the Data Protection Act 1984 concerned with?

Answer 3

Personal data relating to an identifiable living individual.

Question 4

What 3 things does the Data Protection Act consider?

Answer 4

∙ data subjects — individuals on whom data is held;
∙ data users — those who process and control data;
∙ computer bureaux — those who only process data.

Question 5

What does GDPR stand for?

Answer 5

General Data Protection Regulation

Question 6

What are the 6 rules for the GDPR?

Answer 6

Personal data must be:
1 processed lawfully, fairly and transparently;
2 collected only for specific legitimate purposes;
3 adequate, relevant and limited to what is necessary;
4 accurate and, where necessary, kept up to date;
5 stored only as long as is necessary;
6 processed in a manner that ensures appropriate security

Question 7

What 7 privacy rights do individuals have?

Answer 7

Data subjects have:
∙ the right to be informed;
∙ the right of access;
∙ the right to rectification;
∙ the right to erasure;
∙ the right to restrict processing;
∙ the right to data portability;
∙ the right to object.

Question 8

What is the Right To Be Forgotten?

Answer 8

The right to have personal data erased, including links from search results in Europe.

Question 9

What is the Regulation of Investigatory Powers Act?

Answer 9

The Regulation of Investigatory Powers Act says that an
individual who is believed to have cryptographic keys may face up to two years (and five years in case of national security) imprisonment for failing to hand them over.

Question 10

Who is the Data Protection Registrar

Answer 10

They were responsible for promoting data protecting and enforcing the Act at Tribunals.

Question 11

What has happened since the Data Protection Act became law?

Answer 11

There has been increased concern that the public are being bamboozled into handing over their personal data, or tricking into subscribing to services.