General Flashcards
1
Q
Define “personal data breach”
A
A breach of security leading to the accidental, unauthorised disclosure of or access to personal data transmitted, stored or otherwise processed.
2
Q
What type of consent is required?
A
Express, informed and opted in.
3
Q
How must consent be recorded?
A
It must be documented.
4
Q
What does GDPR require for consent withdrawal?
A
It has to be as easy as giving consent.
5
Q
Can a data subject withdraw consent?
A
Yes at any time, any data can be removed. Any UK or EU citizen can request removal.
6
Q
The right to remove all data for a subject is called?
A
Right to be forgotten.
7
Q
For which reason may data be retained?
A
Only when there is regulatory or statutory obligation to do so. Retention cannot be for marketing or future sales.
