Legislation

Question 1

What does DPA stand for?

Answer 1

Data Protection Act

Question 2

What is covered by the DPA?

Answer 2

Personal Information such as name, contact details, employment history, date of birth etc

Question 3

Who enforces the rules of the DPA?

Answer 3

The Information Commissioner

Question 4

What is the Data Protection Register

Answer 4

A record of what information will be stored and how it will be used

Question 5

Give 3 examples of sensitive personal data

Answer 5

Religion, cultural/ethnicity information, political opinions

Question 6

How does sensitive personal data need to be treated differently to general personal data

Answer 6

You normally need to ask permission to store sensitive personal data and it needs to be stored

Question 7

Data must be collected and used…

Answer 7

fairly and inside the law

Question 8

Data must be held and used only

Answer 8

for the reasons given to the information commissioner

Question 9

Sharing: Data cannot be

Answer 9

given away or sold (unless you said you would in the register)

Question 10

Amount: Data must be

Answer 10

adequate, relevant but not excessive (not too much or too little for the purpose on the register)

Question 11

Correctness: Data must be

Answer 11

accurate and up to date

Question 12

Time: Data must not be

Answer 12

kept for too long (only as long as is appropriate)

Question 13

Security: Data must be kept

Answer 13

safe and secure

Question 14

What are the 7 rights of people whose data is stored?

Answer 14

A Right of Subject Access
A Right of Correction
A Right to Prevent Distress
A Right to Prevent Direct Marketing
A Right to Prevent Automatic Decisions
A Right of Complaint to the Information Commissioner.
A Right to Compensation

Question 15

Who is exempt from the DPA?

Answer 15

People holding data for national security reasons, or people holding data for domestic purposes (E.g. personal address book)

Question 16

What is the CMA?

Answer 16

Computer Misuse Act

Question 17

What are the three offenses in the Computer Misuse Act?

Answer 17

Accessing computer material without permission, eg looking at someone else’s files.
Accessing computer material without permission with intent to commit further criminal offences, eg hacking into the bank’s computer and wanting to increase the amount in your account.
Altering computer data without permission, eg writing a virus to destroy someone else’s data, or actually changing the money in an account.