Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

ICAEW Law 11: Employment, data protection and intellectual property law. > 11. Data protection. > Flashcards

11. Data protection. Flashcards

(76 cards)

Start Studying
1
Q

T/F: data protection legislation applies only to that collected or recorded in electronic form.

A

FALSE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

The most recent primary legislation regarding data protection in the UK is the …

A

Data Protection Act (2018)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

The Data Protection Act (2018) implements and supplements the EU’s ….

A

General Data Protection Regulation (GDPR)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

GDPR: General Data Protection R*

A

regulation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

“…” means any information relating to an identified or identifiable living individual.

A

personal data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

“Personal data” means any information relating to an [I or I LI]*

A

identified or identifiable living individual

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

“processing” information can involve: C*, R, S, A, D, C, D

A

collection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

“processing” information can involve: C, R*, S, A, D, C, D

A

recording

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

“processing” information can involve: C, R, S*, A, D, C, D

A

storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

“processing” information can involve: C, R, S, A*, D, C, D

A

adaptation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

“processing” information can involve: C, R, S, A, D*, C, D

A

disclosure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

“processing” information can involve: C, R, S, A, D, C*, D

A

combination

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

“processing” information can involve: C, R, S, A, D, C, D*

A

destruction

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Data protection (does / does not) require safeguards where automated decision making occurs on the basis of information provided by/collected on data subjects.

A

does

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

DC* determine the purpose and means of processing personal data.

A

data controllers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

DP* are responsible for processing personal data on behalf of a controller.

A

data processors

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

DS* are identified or identifiable individuals (not companies) to whom personal data relates.

A

data subjects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

A limited company (can / can not) be a ‘data subject’.

A

can not

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Data protection legislation applies to … organisations.

A

all

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Opinions, as distinguished from facts, (do / do not) fall within the scope of data protection legislation.

A

do

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

The person responsible for data regulation in the UK is the …

A

Information Commissioner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Data protection law in the UK uses a (prescriptive / risk based) approach.

A

risk based

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Information which an individual has published about themselves, for example a professional profile, (is / is not) nevertheless covered by data protection legislation.

A

is

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Any data breach must be reported to the information commissioner within …

A

72 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Individuals whose data is subject to a breach need only be informed directly if the case is ...
high risk
26
Data protection principles: LFAT* (G, C, OAH), PL (S, E, L), DM (A, R, NE), A (C), SL (RP), I (CAS)
lawfullness, fairness and transparency
27
Data protection principles: LFAT (G*, C, OAH), PL (S, E, L), DM (A, R, NE), A (C), SL (RP), I (CAS)
grounds for holding the data
28
Data protection principles: LFAT (G, C*, OAH), PL (S, E, L), DM (A, R, NE), A (C), SL (RP), I (CAS)
clarity in how the data is used
29
Data protection principles: LFAT (G, C, OAH*), PL (S, E, L), DM (A, R, NE), A (C), SL (RP), I (CAS)
openness and honesty in how the data is used from the start
30
Data protection principles: LFAT (G, C, OAH), PL* (S, E, L, CfNP), DM (A, R, NE), A (C), SL (RP), I (CAS)
purpose limitation
31
Data protection principles: LFAT (G, C, OAH), PL (S, E, L)*, DM (A, R, NE), A (C), SL (RP), I (CAS)
the purpose for recording the data must be specified, explicit and legitimate
32
Data protection principles: LFAT (G, C, OAH), PL (S, E, L), DM* (A, R, NE), A (C), SL (RP), I (CAS)
data minimisation
33
Data protection principles: LFAT (G, C, OAH), PL (S, E, L), DM (A*, R, NE), A (C), SL (RP), I (CAS)
adequate - sufficient to fulfil the purpose and no more
34
Data protection principles: LFAT (G, C, OAH), PL (S, E, L), DM (A, R*, NE), A (C), SL (RP), I (CAS)
relevant - linked rationally to the purpose
35
Data protection principles: LFAT (G, C, OAH), PL (S, E, L), DM (A, R, NE*), A (C), SL (RP), I (CAS)
not excessive - limited to what is necessary to fulfil the purpose
36
Data protection principles: LFAT (G, C, OAH), PL (S, E, L), DM (A, R, NE), A* (C), SL (RP), I (CAS)
accuracy - reasonable steps must be taken to ensure the data is not incorrect or misleading
37
Data protection principles: LFAT (G, C, OAH), PL (S, E, L), DM (A, R, NE), A (C*), SL (RP), I (CAS)
correction of data which is found to be inaccurate or misleading
38
Data protection principles: LFAT (G, C, OAH), PL (S, E, L), DM (A, R, NE), A (C), SL* (RP), I (CAS)
storage limitation - data should not be kept for longer than is necessary for the purpose for which it was collected
39
Data protection principles: LFAT (G, C, OAH), PL (S, E, L), DM (A, R, NE), A (C), SL (RP*), I (CAS)
retention policy - data which is no longer needed should be destroyed or anonymised
40
Data protection principles: LFAT (G, C, OAH), PL (S, E, L), DM (A, R, NE), A (C), SL (RP), I* (CAS)
integrity - data processing must take appropriate security measures as regards risks that might arise
41
Data protection principles: LFAT (G, C, OAH), PL (S, E, L), DM (A, R, NE), A (C), SL (RP), I (CAS*)
confidentiality and security
42
Data protection principles: LFAT (G, C, OAH), PL (S, E, L, CfNP*), DM (A, R, NE), A (C), SL (RP), I (CAS)
consent - if the data is used for a new purpose
43
A business must have a valid '...' in order to process personal data.
lawful basis
44
Most lawful bases require that processing is ‘...’ for a specific purpose. If you can reasonably achieve the same purpose without the processing, you won’t have a lawful basis.
necessary
45
Most lawful bases require that processing is ‘necessary’ for a SP*. If you can reasonably achieve the same purpose without the processing, you won’t have a lawful basis.
specific purpose
46
If a buisiness intends to process data, it must determine its ... before it begins processing, and should document it.
lawful basis
47
If a buisiness intends to process data, it must determine its lawful basis before it begins processing, and should ...
document it
48
Lawful bases for data processing: C* (E and for a SP), C, LO, VI (PoL), PT, LI
consent
49
Lawful bases for data processing: C (E and for a SP)*, C, LO, VI (PoL), PT, LI
explicit and for a specific purpose
50
Lawful bases for data processing: C (E and for a SP), C*, LO, VI (PoL), PT, LI
contract, including pre-contractual negotiations
51
Lawful bases for data processing: C (E and for a SP), C, LO*, VI (PoL), PT, LI
legal obligation
52
Lawful bases for data processing: C (E and for a SP), C, LO, VI* (PoL), PT, LI
vital interest
53
Lawful bases for data processing: C (E and for a SP), C, LO, VI (PoL*), PT, LI
protection of life
54
Lawful bases for data processing: C (E and for a SP), C, LO, VI (PoL), PT*, LI
public task
55
Lawful bases for data processing: C (E and for a SP), C, LO, VI (PoL), PT, LI*
legitimate interest
56
Rights under the GDPR: TBI*, A, R, E, RP, DP, O, ADM and P
to be informed
57
Rights under the GDPR: TBI, A*, R, E, RP, DP, O, ADM and P
access
58
Rights under the GDPR: TBI, A, R*, E, RP, DP, O, ADM and P
rectification
59
Rights under the GDPR: TBI, A, R, E*, RP, DP, O, ADM and P
erasure
60
Rights under the GDPR: TBI, A, R, E, RP*, DP, O, ADM and P
restrict processing
61
Rights under the GDPR: TBI, A, R, E, RP, DP*, O, ADM and P
data portability
62
Rights under the GDPR: TBI, A, R, E, RP, DP, O*, ADM and P
to object
63
Rights under the GDPR: TBI, A, R, E, RP, DP, O, ADM and P*
automated decision making and profliing
64
An individual excercising their right to access and receive a copy of their personal data and other supplementary information is commonly referred to as a ... or ‘SAR’.
subject access request
65
Exemptions from GDPR must be determined on a ... basis.
case by case
66
Exceptions from GDPR: DP*, LE, IS
domestic purposes
67
Exceptions from GDPR: DP, LE*, IS
law enforcement
68
Exceptions from GDPR: DP, LE, IS*
intelligence services
69
Grounds for exemption from GDPR: C/L/PP*, R/P/J, J/R/A, H/SW/E/CA, F/M/N, R/E, IAOP, NS/D
Crime, law and public protection.
70
Grounds for exemption from GDPR: C/L/PP, R/P/J*, J/R/A, H/SW/E/CA, F/M/N, R/E, IAOP, NS/D
Regulation, parliament and the judiciary.
71
Grounds for exemption from GDPR: C/L/PP, R/P/J, J/R/A*, H/SW/E/CA, F/M/N, R/E, IAOP, NS/D
Journalism, research and archiving.
72
Grounds for exemption from GDPR: C/L/PP, R/P/J, J/R/A, H/SW/E/CA*, F/M/N, R/E, IAOP, NS/D
Health, social work, education and child abuse.
73
Grounds for exemption from GDPR: C/L/PP, R/P/J, J/R/A, H/SW/E/CA, F/M/N*, R/E, IAOP, NS/D
Finance, management and negotiations.
74
Grounds for exemption from GDPR: C/L/PP, R/P/J, J/R/A, H/SW/E/CA, F/M/N, R/E*, IAOP, NS/D
References and exams.
75
Grounds for exemption from GDPR: C/L/PP, R/P/J, J/R/A, H/SW/E/CA, F/M/N, R/E, IAOP*, NS/D
Information about other people.
76
Grounds for exemption from GDPR: C/L/PP, R/P/J, J/R/A, H/SW/E/CA, F/M/N, R/E, IAOP, NS/D*
National security and defence.

ICAEW Law 11: Employment, data protection and intellectual property law. (7 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions