Legislation BTEC Level 3 IT

What is the legal obligation of organisations regarding personal data?

• To keep it public and accessible

• To keep it safe, secure, accurate and accessible

• To share it with other organisations

• To use it for marketing purposes only

What could be a consequence if data is not held securely?

• Improved customer service

• Increased data transparency

• Identity theft or embarrassment

• Faster data processing

Which of the following is a concern when organizations hold data about you?

• The data might be outdated.

• The data might be sold or given to other organizations without your permission.

• The data might be publicly posted on social media.

• The data might be used to improve customer service.

When considering the safety of your data held by organizations, which of the following is a valid consideration?

• Whether the data can be accessed by anyone.

• Whether the data is stored in a colorful folder.

• Whether the data is used for marketing purposes only.

• Whether you are confident that the data is safe and up-to-date.

What is an important aspect to consider about the data that organizations hold about you?

• If the data can be used to make online purchases.

• If the data includes your favorite color.

• If you are confident that it will not be misused.

• If the data is shared with your friends.

What is HM Revenue & Customs responsible for?

• UK healthcare system

• UK tax collection

• UK education system

• UK transportation infrastructure

How many adults' data was lost in the HM Revenue & Customs breach?

• 5.5 million

• 9.5 million

• 15.5 million

• 20.5 million

What year was the Data Protection Act that affects all organisations holding personal data about individuals enacted?

• 2015

• 2016

• 2018

• 2019

What must be ensured about personal data according to the Data Protection Act?

• It must be publicly accessible

• It must be kept accurate, up-to-date, safe, and secure

• It must be used in ways which would harm individuals

• It must be deleted after a year of collection

What does the Data Protection Act (2018) implement?

• The EU General Data Protection Regulation (GDPR)

• The United Nations Privacy Act

• The International Cybersecurity Protocol

• The American Data Privacy Law