Data Privacy

The main source of law in regards to data privacy is ...

• General Data Protection Regulation

• General Data Privacy Regulation

• Data Privacy Code of Laws

• Anti Data Leakage Regulation

GDPR only applies to data held on computers

• True

• False

The General Data Protection Regulation:

• is the law setting out how data must be handled

• is a set of guidelines suggesting how data should be handled

• doesn’t apply to financial institutions as they have their own rules

• describes how company’s financial information must be protected

People must give a reason to unsubscribe from a mailing list

• True

• False

Who should you notify first if you think there might have been a data breach?

• Ludwig Pettersson

• Helen Danielsson

• Kamil Gross

• Swedish Privacy Protection Agency (IMY)

Political opinions, trade union membership, genetic or biometric data processed for purpose of identification are ... categories of personal data

What is NOT a GDPR principle?

• Personal data must be fairly and lawfully processed

• Personal data must be secure

• Personal information must not be kept for longer than 20 years

• Personal information must be adequate, relevant and not excessive

We always need a basis for data processing

• True

• False

What is NOT a data subject's right?

• Right to rectification if the data is incorrect

• Right of access to their personal data

• The right to have copies of all their personal data that is being processed or held

• Right to be provided with the response within 7 days

What does Data Protection Impact Assessment (DPIA) means?

• The assessment of possible cloud usage

• The description of intended data processing and its purposes

• It means that people have a right to understand how their data is being used

• The inspection conducted by IMY on site