You are developing a new app that collects user data. Which of the following actions best aligns with GDPR principles?

Informing users about the data collected & obtaining their explicit consent

Who is referred to as the 'data subject' in data protection terms?

The individual about whom the data are stored

Information Commissioner's Office

Which 3 things must be disclosed to the ICO?

Data being held, why they are collecting it and how it will be used.

Which of the following is not a key principle of the Data Protection Act?

Data should be retained indefinitely

The ICO can impose a standard maximum penalty on data holders for administrative breaches of regulations, this is

€10 million or 2% of the organisation's worldwide turnover

The ICO can impose a higher maximum penalty of how much on organisations that breach regulations like transferring data

€20 million or 4% of the organisation's worldwide turnover

What is the primary role of a data controller under the General Data Protection Regulation (GDPR)?

To determine the purposes and means of processing personal data.

When developing a booking system for a hotel, which of the following GDPR considerations is most important?

Collecting necessary data for the booking process and informing users

studbud

Data Protection Act

15 termsStudBud Administration12 plays

Imported from external platform

Flashcards15 cardsFPractice quizPHost liveL

Questions 15

Answers

1
The Data Protection Act 2018 outlines 8 key principles for handling data?
False
True
2
You are developing a new app that collects user data. Which of the following actions best aligns with GDPR principles?
Informing users about the data collected & obtaining their explicit consent
Storing user data indefinitely to ensure it is always available
Collecting as much user data as possible without informing users.
Sharing user data with third parties without knowledge to enhance features.
3
Under GDPR consent can be inferred by a pre-ticked opt in box on a website?
False
True
4
GDPR Regulations do not apply to people operating outside of the EU?
False
True
5
Who is referred to as the 'data subject' in data protection terms?
The organisation collecting the data
The software used to store the data
The regulatory body overseeing data protection
The individual about whom the data are stored
6
Data processed in relation to which of the following areas are not exempt from the principles of the DPA?
Domestic Purposes
National Security
Crime and Taxation
Limited Companies
7
In 2018 the Data Protection Act was updated to comply with the European General Data Protection Regulation (GDPR)?
False
True
8
ICO stands for
Internet Compliance Office
International Commerce Organisation
International Cybersecurity Organisation
Information Commissioner's Office
9
Which 3 things must be disclosed to the ICO?
Data being held, who will access it, the cost of collection
Data being held, location of storage, encryption information
Data being held, duration of storage, method of collection
Data being held, why they are collecting it and how it will be used.
10
Which of the following is not a key principle of the Data Protection Act?
Data should be relevant and not excessive
Data should be retained indefinitely
Data must not be transferred outside the EU without adequate protection
Data should be processed fairly and lawfully
11
The ICO can impose a standard maximum penalty on data holders for administrative breaches of regulations, this is
€10 million or 2% of the organisation's worldwide turnover
€20 million or 4% of the organisation's worldwide turnover
€5 million or 1% of the organisation's worldwide turnover
€15 million or 3% of the organisation's worldwide turnover
12
The ICO can impose a higher maximum penalty of how much on organisations that breach regulations like transferring data
€15 million or 3% of the organisation's worldwide turnover
€10 million or 2% of the organisation's worldwide turnover
€20 million or 4% of the organisation's worldwide turnover
€5 million or 1% of the organisation's worldwide turnover
13
What is the primary role of a data controller under the General Data Protection Regulation (GDPR)?
To monitor and report data breaches to the supervisory authority.
To process personal data on behalf of another organisation.
To ensure the security of personal data during transmission.
To determine the purposes and means of processing personal data.
14
Under the Data Protection Act, a data subject has the right to access the data kept about them and other people?
False
True
15
When developing a booking system for a hotel, which of the following GDPR considerations is most important?
Collecting necessary data for the booking process and informing users
Sharing user data with third-party marketing companies for personalised ads
Auto enrolling users in the hotel's loyalty program without their consent
Storing user data indefinitely to ensure repeat customers book with ease

Data Protection Act Flashcards | StudBud