Legal Requirements

Question 1

What regulation requires that personal data cannot be collected, processed, or retained with the individuals informed consent?

Answer 1

General Data Protection Regulation (GDPR)

Note: This means the data must be used only for it’s intended purpose and explained to the user in plain language.

Question 2

GDPR also allows the user to withdraw, inspect, amend, or erase data held about them. What is this known as?

Answer 2

The Right to be Forgotten

Note: This only applies in the EU

Question 3

Reminder

Answer 3

Data breaches are not just hacking, but they can also happen accidently or through malicious interference