Principles Related To DP

Question 1

Explain lawfulness in the context of GDPR

Answer 1

Identification of a legal basis for processing, which includes
- consent of data subject
- performance of a contract to which the data subject is a party
- controllers compliance with legal obligation

Question 2

Explain fairness in the context of GDPR

Answer 2

• Avoiding negative impact on data subjects
• Considering reasonable expectation of privacy
• Not misleading or deceiving data subject

Question 3

Explain transparency in the context of GDPR

Answer 3

• compliance with obligations on information provision to data subjects
• Clear, plain language accessible, and honest information
• Avoiding opacity (invisible processing)

Question 4

Explain purpose limitation

Answer 4

Personal data shall be collected for specified explicit and legitimate purposes

Controllers have to inform data subjects about purposes

Question 5

Explain data minimisation

Answer 5

Adequate sufficient to properly fulfil controllers purpose

Relevant rational link to purpose

Question 6

Explain accuracy in the context of GDPR

Answer 6

Contextual, meaning

Controllers should ensure that source and status of personal data is clear

Carefully consider any challenges to the accuracy of information

Question 7

Explain storage limitations in the context of GDPR

Answer 7

Considering retention periods retention policies by using erasure and analyzation

Exceptions apply

Question 8

Explain, integrity and confidentiality i context of GDPR

Answer 8

• Controllers and processors to implement appropriate security measures
• Security measures must be proportional to the risks associated with processing activities
• Factors that term in the appropriate level of security include nature of the data and potential impact on individuals, rights and freedom

Question 9

Explain how organisations are held accountable

Answer 9

• Data protection as risk management policy
• Data protection by design
• Data protection by default

Question 10

Name and describe all GDPR personae

Answer 10

Data subjects: Individuals to whom the data relates.

Controllers: Entities that determine purposes and means of processing.

Processors: Entities that process data on behalf of a controller.

Data protection officers (DPOs): Individuals responsible for ensuring GDPR compliance.

Supervisory authorities: Public bodies responsible for enforcing GDPR.

Question 11

What are Joint controllers

Answer 11

Two or more entities that jointly determine data processing purposes and means, each responsible for GDPR compliance with a legal basis for processing and a joint agreement outlining their responsibilities and obligations.