principles of data protection_QUESTIONS Flashcards
What are the key principles of data protection outlined in the Act?
The principles include lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.
What does “lawfulness” mean in the context of data processing?
Data must be processed lawfully, fairly, and in a transparent manner.
What is meant by “fairness” in data processing?
Data processing should not adversely affect the rights of the data subject.
Define “transparency” in relation to data protection principles.
Data subjects must be informed about how their personal data is being used.
What is “purpose limitation”?
Personal data should only be collected for specified, legitimate purposes and not further processed in a manner incompatible with those purposes.
Explain “data minimization.”
Only the personal data that is necessary for the intended purpose should be collected and processed.
What does “accuracy” refer to in data protection?
Personal data must be accurate and kept up to date; inaccurate data should be rectified or deleted.
What is meant by “storage limitation”?
Personal data should not be kept in a form that allows identification of data subjects for longer than necessary.
Define “integrity and confidentiality” in the context of data protection.
Personal data must be processed securely to prevent unauthorized access, loss, or damage.
What is the significance of the principle of accountability?
Data controllers are responsible for complying with data protection principles and must demonstrate compliance.
How does the principle of “data subject rights” relate to data protection?
Data subjects have rights to access, rectify, erase, and restrict processing of their personal data.
What is the role of consent in data processing under the principles?
Consent must be obtained from data subjects before processing their personal data, and it must be informed and specific.
What does “data protection by design” entail?
Data protection measures should be integrated into the development of business processes and systems.
How does the principle of “data protection by default” work?
Only personal data necessary for a specific purpose should be processed by default.
What is the importance of regular audits in relation to data protection principles?
Audits help ensure compliance with data protection principles and identify areas for improvement.