Information Provision Obligations & Data Subject Rights Flashcards

1
Q

What right is established by Article 22(1)?

A

Right to not be subject to automated decision making.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

True or False: Under the GDPR, Data Subjects have the right to not be evaluated on the basis of automated processing.

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are 8 rights of data subjects, established under the GDPR?

A

TARRENDA

  1. Right of TRANSPARENT COMMUNICATION
  2. Right of ACCESS
  3. Right to RECTIFICATION
  4. Right to RESTRICT Processing
  5. Right to ERASURE
  6. Obligation to NOTIFY RECIPIENTS
  7. Right to DATA PORTABILITY
  8. Right to not be subject to AUTOMATED-PROCESSING
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What rights are generally established under Article 12-14 of the GDPR?

A

Right to Transparent Communication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What rights are generally established under Article 15 of the GDPR?

A

Right to Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What Article established the right to Access.

A

Article 15

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What rights are established under Article 16 of the GDPR?

A

Right to Rectification

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What rights are established under Article 17 of the GDPR?

A

Right to erasure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What rights are established under Article 18 of the GDPR?

A

Right to restriction of processing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What rights are established under Article 19 of the GDPR?

A

Obligation to notify recipients.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What rights are established under Article 20 of the GDPR?

A

Right to data portability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What rights are established under Article 22 of the GDPR?

A

Right to not be subject to automated decision making.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the right to information?

A

Data subject has the right to be provided with certain pieces of information that describe their relationship with the controller.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the right of access?

A

Data subject must be told about personal data that the organisation holds about them, why and how.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

True or False: Under the right of access, the data subject is entitled to receive the purpose of processing?

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the data subject entitled to receive under a right of access?

A
  1. Purpose of processing
  2. Categories of personal data concerned
  3. Recipients who have or will be disclosed
  4. Period of data storage
  5. Existence of right to rectification or erasure
  6. Right to file complaint with supervisory authority
  7. Source of information
17
Q

True or False: Under the right to access, the data subject is not entitled to learn of the recipients of their data?

A

False

The Data Subject is entitled to receive information on the recipients or have or will receive the Data Subjects personal data.

18
Q

True or False. An organisation that receives a data access request is not allowed to challenge the data subject or ask them any questions, the information must be shared.

A

False.

The organisation is allowed to request information to confirm the identity of the requestor.

19
Q

True or False. A controller must notify a data subject of their right to complain to a supervisory authority?

A

True.

20
Q

True or False. A controller is not required to notify a data subject of their right to request that data be rectified or erased?

A

False.

Controller must notify of right to rectification or erasure

21
Q

Does a controller have to notify a data subject of the source of their personal data?

A

Only when received from a source other than the data subject (ie. third party).

22
Q

Define the concept: Period of data storage.

A

Under the right to access, a data subject has the right to know how long a controller will store their personal data.

23
Q

Define the concept: Right of Access.

A

Data subject is entitled to access information held by the controller concerning their personal data, including:

  1. Processing purpose
  2. Categories of data concerned
  3. Recipients
  4. Storage period
  5. Notice regarding their right to erasure, rectification and ability to file complaints with supervisory authority
  6. Source (if applicable)
24
Q

Under the right to access, what rights must the controller give notice of?

A
  1. Right to erasure
  2. Right to rectification
  3. Right to file complaint with supervisory authority
25
Q

True or False: Data subjects have the right to correct data held by data controllers?

A

True - right to rectification

26
Q

True or False: Data controller must ensure that incorrect data is erased?

A

True - right to rectification