Data Protection

Why must an organisation comply with data protection legislation when producing business documents containing personal information?

Choose one answer.

• To ensure version control is maintained

• To allow for fast retrieval

• To protect individual property

• To ensure details about individuals are accurate

When storing customer information which of these factors must comply with data protection legislation?

Choose one.

• Information must be recorded electronically

• Information must be kept for no longer than necessary

• Information must never be shared with a third party

• Information must be kept in an unrestricted area

Why is a public sector organisation legally required to ensure data kept is accurate?

Choose one.

• In case of customer fraud

• For accessibility purposes

• In case of a freedom of information request

• For future recruitment purposes

An organisation receives a request to share its customer information with an external organisation outside of the UK. What must the organisation do in response to this to comply with data protection legislation?

Choose one answer.

• Supply information within one month

• Ensure there is adequate protection for customer rights

• Ensure information is signed for on receipt

• Delete customer records once the information has been transferred

Information which complies with data protection regulation can be stored ----

Choose one answer.

• anywhere

• securely within the UK

• in an unsecured filing cabinet

• securely on a server in Japan

Why is it important to consider data protection in an organisation's staff induction?

Choose one answer.

• To comply with health and safety regulations

• To understand the need for discretion

• To comply with regulatory requirements

• To understand the use of MIS software

The main purpose of data protection regulation is to ----

Choose one answer.

• Store data securely

• Store data in an electronic form

• Protect individuals against the misuse of information about them

• Disguise the data of individuals so that it cannot be misused

The most common reasons for a Data Breach are down to human error?

• True

• False

What is the standard length of time to respond to a Subject Access Request (SAR) under an individual's Rights of Access?

Choose one answer

• 6 months

• 20 working days

• 1 month

• As soon as possible

Under Article 23 EU member states can disregard GDPR in certain situations.

Choose which does not apply.

• National security

• Public security

• Prevention, investigation, detection or prosecution of criminal offences

• It always has the right to do what it wants to do in relation to GDPR