Legalisation And Privacy

Question 1

What are the 6 rules for lawful processing of data?

Answer 1

• Consent to the task
• Legal obligation
• Public task
• Contract (to fullfil a contract eg housing)
• Vital interests (safety interests)
• Legitimate interests (clear benefit to user / company)

Question 2

How might a company collect data? (Other than sign in) (4)

Answer 2

• 3rd parties – other companies can sell or share the data
• Cookies track users as they browse websites
• Paper registration forms
• CCTV

Question 3

What are the rules for the collection of personal data?

Answer 3

• Only collect the data for a specific purpose
• Make sure the data is accurate
• Data that is not necessary for the specific purpose may not
be collected

Question 4

Which laws would protect somebodies information from being stolen?

Answer 4

Computer misuse act 1990
Data protection act 2018

Question 5

What must an organisation do with data in order for it to be lawful

Answer 5

• The data is kept accurate and up to date
• It is not kept any longer than necessary
• It must not be transferred to other countries unless they can keep it protected
• Customers must be told of a data breach within 72 hours of
it happening

Question 6

What basic ways can data be secured? (3)

Answer 6

• Using passwords for any systems with access to the data
• Encrypting the data
• Only allowing access to those users that need it

Question 7

What ways might more sensitive data be protected?

Answer 7

• CCTV
• Security guards
• Two-factor authentication

Question 8

What main rights does the data protection act give? (5)

Answer 8

• The right to view and change data stored about you for free
• The right to need consent to have marketing sent to you
• The right to withdraw consent
• The right to change data if it is innacurate
• The right to be forgotten (deleted after a certain time)