LECTURE 4 - privacy regulations

Question 1

Data privacy and processing regulations (definition)

Answer 1

Regulations that govern the collection and processing of sensitive data, especially in cases where natural person can be identified based on such data

Question 2

When does GDPR apply? (4)

Answer 2

• GDPR applies in accordance with territorial scope
• GDPR applies to personal data
• GDPR applies to the relationships between data subject, data controller, data processor and recipient
• GDPR applies to data processing

Question 3

Identifiable data meaning

Answer 3

information related to an identifiable person, data that can identify an individual

Question 4

Data subject

Answer 4

natural person whose data is processed

Question 5

Controller

Answer 5

Someone who determines the purposes and means of data processing

Question 6

Processor

Answer 6

Someone who processes the data

Question 7

Recipient

Answer 7

To whom the personal data is disclosed (shown)

Question 8

Examples of data processing

Answer 8

collection
recording
organization
structuring
use
making available
retrieval
alignment or combination
erasure
destruction

Question 9

GDPR bases regulation of data processing on 5 main pillars:

Answer 9

• Controller, data processor and recipient should comply with the principles of processing
• There should be a justification for processing
• Some data requires special justification
• Data subject has rights within data processing
• Controller, data processor and recipient are liable for keeping data secure

Question 10

Principles of processing (6)

Answer 10

• Lawfulness, fairness and transparency
• Purpose limitation
• Data minimization
• Accuracy
• Storage limitation
• Integrity and confidentiality

Question 11

Justification for processing (4)

Answer 11

• Consent of data subject
• Performance of a contract to which the data subject is party
• Public purposes (compliance with legal obligation, protection of vital interest, etc.)
• Legitimate interest (education, research, limited use, not sensitive)

Question 12

Special justification processing is allowed when: (3)

Written in article?

Answer 12

• Subject has given explicit consent
• Necessary to carry out the obligations of the controller
• Necessary to protect the vital interest of the data subject or other person
• Written in article 9 GDPR

Question 13

Data subject rights (5)

Answer 13

• Ratification of inaccurate data
• Erasure of data
• Restrict data processing
• Receive the data processed
• Object processing