Week 8 - Laws on Data Protection & Business through Internet

Question 1

What is a ‘Data Subject’?

Answer 1

Any living individual who is the subject of personal data held by an organisation.

Question 1

What is a ‘Data Controller’?

Answer 1

The natural or legal person, public authority, agency or other body which, alone or jointly with others. determines the purposes and means of the processing of personal data.

Question 2

What is ‘Data Processing’?

Answer 2

It means any operation or set of operations, which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation, or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Question 3

What is ‘Personal Data’?

Answer 3

It means any information relating to an identified or identifiable natural person.

Question 4

What is a ‘natural’ person?

Answer 4

A human being who is alive.

Question 5

What is an ‘identifiable natural’ person?

Answer 5

One who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Question 6

What are the seven principles of data protection?

Answer 6

• Lawfulness, Fairness & Transparency
• Purpose
• Data Minimisation
• Accuracy
• Storage
• Security
• Accountability

Question 7

What does ‘Lawfulness, Fairness & Transparency’ entail?

Answer 7

• Organisations and controllers to be 100% transparent while seeking the individuals data collection, processing and protection.
• They must deliver the data collection purposes in clear and plain language to address the data subjects’ consent and individual rights on personal data collection.

Question 8

What does ‘Purpose’ entail?

Answer 8

• Personal data must be used for the specific purpose the data subjects have given consent.
• The controller cannot use the data for processing outside the mentioned purpose.

Question 9

What does ‘Data Minimisation’ entail?

Answer 9

The DPA 2018 conditions collect the necessary, relevant and not excessive amount of personal data for processing. The controller must not collect more data than they need.

Question 10

What does ‘Accuracy’ entail?

Answer 10

The controllers must verify that the data they process and collect is accurate and not misleading, incomplete or incorrect.

Question 11

What does ‘Storage’ entail?

Answer 11

The controllers should not keep personal data more than required. They must notify the data subjects on how long they will hold their data.

Question 12

What does ‘Security’ entail?

Answer 12

DPA 2018 ordered the organisations and controllers to have security controls and measures to protect the confidentiality or integrity of stored and processed personal data so nobody can alter or steal the data subjects’ information.

Question 13

What does ‘Accountability’ entail?

Answer 13

• This principle is relatively new in contrast with DPA 1998.
• With this newly added principle in DPA 2018, every organisation that stores or processes personal data must comply with regulatory obligations.

Question 14

What is the ‘Datas Protection Act 2018’?

Answer 14

• A UK law that complements the UK GDPR.
• The DPA 2018 mostly refers you back to the UK GDPR but includes UK specific details for a few things such as; how to process criminal conviction data,