GDRP

Question 1

What are examples of personal data?

Answer 1

Name, address, National Insurance Number, passport number, any personally identifiable information

Question 2

What is special category data?

Answer 2

Racial origins, sexual orientation, religion, politics, things you might be discriminated against.

Question 3

What is a data controller?

Answer 3

Someone who determines the purpose and essentials means for using personal data.

Question 4

What is a data processor?

Answer 4

A subcontracted company that handles data without making key decisions about that data

Question 5

What is a data subject?

Answer 5

An identifiable natural person.

Question 6

What is the General Data Protection Regulations (GDPR) for?

Answer 6

A law that sets the guidelines for safely and securely storing data and information.

Question 7

What are the 7 principles for GDPR?

Answer 7

1) Lawfulness, fairness, and transparency
2) Purpose Limitation
3) Data minimization
4) Accuracy
5) Storage Limitation
6) Integrity and confidentiality (security)
7) Accountability

Question 8

What is the Lawfulness, fairness and transparency law?

Answer 8

Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject. There must be valid grounds for collecting and using personal data.

Question 9

What is the purpose limitation law?

Answer 9

Personal data shall be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

Question 10

What is the data minimisation law?

Answer 10

Personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed. Not gathering any more than needed.

Question 10

What is the data minimisation law?

Answer 10

Personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed. Not gathering any more than needed.

Question 11

What is the accuracy law?

Answer 11

Personal data shall be accurate and where necessary kept up to date.

Question 12

What is the storage limitation law?

Answer 12

Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.

Question 13

What is the integrity and confidentiality law?

Answer 13

Personal data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate measures.

Question 14

What is the accountability law?

Answer 14

The controller shall be responsible for and be able to demonstrate compliance with the Data Protections Principles.

Question 15

What are the customer rights under GDPR?

Answer 15

Right to be informed
Right to access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object
Rights regrading automated decision making

Question 16

What is the Right to be informed?

Answer 16

Customers have a right to be informed that their data is being used and for what purpose.

Question 17

What is the Right Of Access

Answer 17

Customers have the right to access their data. This must be enabled either through business process or technical means.

Question 18

Wat is the Right to Rectification?

Answer 18

Customers have the right to correct information that they believe might be inaccurate.

Question 19

What is the Right to Erasure?

Answer 19

Customers have the right to be forgotten, provided that your legitimate interest to hold such information does not override theirs.

Question 20

What is the Right to restriction of processing?

Answer 20

Customers have the right to request that you stop processing their data.

Question 21

What is the right to data portability?

Answer 21

Machine and readable export of customers’ personal information must be enabled.

Question 22

What is the right to object?

Answer 22

Customer has the right to object to you using their data.

Question 23

What is Rights regarding automated decision making?

Answer 23

Customer has the right not to be subject to a decision based solely on automated processing, including profiling.