Cambridge Technicals in IT - Unit 02 - LO4.1

What is the primary purpose of the Data Protection Act (DPA) 1998?

• To regulate how personal data is used and stored by organisations.
• To control government surveillance of communications.
• To outline procedures for protecting freedom of speech.
• To ensure public access to court proceedings.

Answer explanation

The DPA 1998 ensures personal data is used lawfully and transparently.

Which legislation focuses on regulating surveillance by public authorities?

• Data Protection Act 1998.
• Protection of Freedoms Act 2012.
• Regulation of Investigatory Powers Act 2000.
• Freedom of Information Act 2000.

Answer explanation

RIPA 2000 governs the use of surveillance by public authorities.

What is a key requirement under the Data Protection Act 1998?

• Data must only be kept for as long as necessary.
• Personal information must not be encrypted.
• Surveillance data must be accessible to the public.
• All communications must be monitored.

Answer explanation

The DPA requires data to be kept only as long as necessary.

Which law focuses on biometric data collection and processing?

• Privacy and Electronic Communications Regulations.
• Data Protection Act 1998.
• Regulation of Investigatory Powers Act 2000.
• Protection of Freedoms Act 2012.

Answer explanation

The Protection of Freedoms Act 2012 addresses biometric data processing and storage.

What is a primary focus of the Privacy and Electronic Communications Regulations?

• Controlling how organisations send electronic marketing messages.
• Monitoring of government agencies.
• Regulating public surveillance in public spaces.
• Defining proper use of personal financial records.

Answer explanation

These regulations deal with privacy in electronic communications, such as emails and cookies.

Under the DPA, what is meant by "data minimisation"?

• Encrypting all data during transmission.
• Collecting only the data necessary for a specific purpose.
• Sharing personal data widely to prevent duplication.
• Collecting large amounts of data to improve accuracy.

Answer explanation

Data minimisation ensures only necessary data is collected and processed.

What is one of the principles under the Regulation of Investigatory Powers Act?

• All surveillance must be carried out openly.
• Surveillance can only be used for financial matters.
• Surveillance must be proportionate to the investigation.
• Public must approve all surveillance.

Answer explanation

RIPA requires surveillance to be proportionate to the purpose of the investigation.

How does the Protection of Freedoms Act 2012 protect individual privacy?

• By regulating the use of CCTV and biometric data.
• By increasing surveillance of personal devices.
• By making personal financial data public.
• By restricting public access to certain areas.

Answer explanation

This act addresses privacy issues related to CCTV and biometric data.

What is a consequence of non-compliance with the Data Protection Act 1998?

• Full disclosure of all private data to stakeholders.
• Loss of public trust and significant fines.
• Imprisonment for up to 10 years.
• Unlimited collection of personal data.

Answer explanation

Non-compliance can result in fines and damage to an organisation's reputation.

Which legislation requires consent for using cookies on websites?

• Data Protection Act 1998.
• Regulation of Investigatory Powers Act 2000.
• Privacy and Electronic Communications Regulations.
• Protection of Freedoms Act 2012.

Answer explanation

The Privacy and Electronic Communications Regulations require user consent for cookies.