Law and Data Science

Question 1

What are the legal grounds for processing of personal data?

Answer 1

1. Consent
2. Contract
3. Legal obligation
4. Vital interests
5. Public interests
6. Legitimate interests

Question 2

Explain legal ground ‘consent’.

Answer 2

In legal ground consent means an explicit consent of a data subject to the processing of their data.

Question 3

Explain legal ground ‘contract’

Answer 3

Data subject has signed a contract that requires them to reveal some data, e.g. an employment contract, terms&conditions.

Question 4

Explain legal ground ‘legal obligation’

Answer 4

e.g. a worker is obliged to keep a record of all of his works for the taxman.

Question 5

Explain legal ground ‘vital interests’

Answer 5

Used in emergencies, e.g. doctors can use your medical data when you had an accident.

Question 6

Explain legal ground ‘public interest’

Answer 6

Used to investigate or prevent a crime, can be done by the police, government.

Question 7

Explain legal ground ‘legitimate interests’

Answer 7

Data can be processed when it’s reasonable to do so and it does not threaten data subject’s privacy. Vague expression. E.g. an employer collecting data about theirs employees’ behaviour

Question 8

What are the principles of data protection?

Answer 8

1. Lawfulness, fairness and transparency
2. Purpose limitations
3. Data minimisation
4. Data accuracy
5. Storage limitations
6. Data security
7. Accountability

Question 9

Explain the principle of data protection ‘Lawfulness, fairness and transparency’.

Answer 9

All data processing should be done in fair manner and controller should inform the data subject about purposes of the analysis. All the information should be provided in simple, understandable language.

Question 10

Explain the principle of data protection ‘Purpose limitation’.

Answer 10

The controller can only use data for the purposes stated before the collection of the data, any processing must be done with a well-defined purpose.

Question 11

Explain the principle of data protection ‘Data minimisation’.

Answer 11

Data processing must be limited to what is necessary, adequate.

Question 12

Explain the principle of data protection ‘Data accuracy’.

Answer 12

All the data must be accurate and up to date. It’s controller’s responsibility that the data is correct.

Question 13

Explain the principle of data protection ‘Storage limitation’.

Answer 13

Data must be kept no longer than it’s necessary, when it’s no longer in use it should be deleted or anonymised.

Question 14

Explain the principle of data protection ‘Data security’.

Answer 14

All data must be kept safe, encrypted. It is processor’s obligation.

Question 15

Explain the principle of data protection ‘Accountability’.

Answer 15

Controller must demonstrate that all the principles of data processing have been fulfilled.