Understanding the Data Protection Act

What year was the original Data Protection Act (DPA) enacted?

• 2000

• 2015

• 2018

• 1998

Which act includes the UK's implementation of GDPR?

• Privacy and Electronic Communications Regulations

• Data Protection Act 2018

• Data Protection Act 1998

• Information Protection Act 2015

Who is considered a 'data subject' under the DPA?

• The organization holding the data

• The person who has data about them stored

• The Information Commissioner

• The person collecting the data

What is the role of the Information Commissioner?

• To process data requests

• To store data securely

• To enforce the Data Protection Act

• To collect data

What kind of data is subject to additional legal protections?

• Sensitive data

• Public data

• Archived data

• Corporate data

What right allows a data subject to demand correction of inaccurate data?

• Right to data portability

• Right to be forgotten

• Right of correction

• Right of access

What was a major addition in GDPR regarding data controllers?

• They must report data breaches within 72 hours

• They must obtain explicit consent for data processing

• They must be able to prove data protection measures are sufficient

• They must appoint a Data Protection Officer

Under GDPR, data must be processed in a manner that ensures what?

• Transparency

• Profitability

• Efficiency

• Security

Which principle of GDPR requires that personal data be kept up to date?

• Accuracy

• Integrity and confidentiality

• Limitation of purpose

• Data minimization

Under GDPR, for what purpose can personal data be processed without consent?

• Marketing

• Legal obligation

• User profiling

• Selling to third parties