4.1.2 The Data Protection Act 2018/General Data Protection Regulation Flashcards
State:
What DPA and GDPR aim to do
Control how personal data and information is used by organisations, businesses and the UK Government as well as empower individuals to take control over their personal data
Explain:
What DPA means in comparison to GDPR
DPA is the UK’s implementation of the EU’s General Data Protection Regulation after the UK left the EU
State:
4 purposes of the DPA 2018
The principles of the act
4 of:
* Used fairly, lawfully and transparently
* Used for specified, explicit purposes
* Used in a way that is adequate, relevant and limited to only what is necessary
* Accurate and, where necessary, kept up to date
* Kept for no longer than necessary
* Kept appropriately secure
State:
4 purposes of the GDPR
The principles of the act
4 of:
* Lawfullness, fairness, trainsparency
* Purpose limitation
* Data minimisation
* Accuracy
* Storage limitation
* Integrity and confidentiality
State:
3 examples of characteristics DPA provides legal protection of
The principles of the act
3 of:
* Race
* Ethnic background
* Political opinions
* Religious beliefs
* Trade union membership
* Genetics
* Biometrics
* Health
* Sex life or orientation
Fill The Blank:
Under DPA a data subject (User) has ……… such as beign able to find out what ……….. is being held about them
Data subject rights
Rights, Data
State:
4 rights a data subject (user) has under DPA
3 of:
* Be informed about how the data is being used
* Access personal data
* Have incorrect data updated
* Have data erased
* Stop or restrict the processing of the data
* Data portability
* Object to how the data is processed in certain circumstances
* Automated decision making processes
* Profiling
Fill The Blank:
DPA and GDPR both require …………… for a marketing ……………… to be sent
Marketing Consent
Consent, Message
Fill The Blank:
Consent must be ………… and …………. given, clear and specific.
Marketing Consent
Knowingly, Freely
Fill The Blank:
Giving consent for marketing material must be …………. and therefore must be an …….-…. method and not in ……… and ………………. because these are hard to understand and rarely read
Marketing Consent
Clear, Opt-in, Terms and Conditions
Fill The Blank:
It must be made easy to opt-out of marketing material such as ‘……………’ at the bottom of an email because consent can be ……………. at any time
Marketing Consent
Unsubscribe, Withdrawn
Fill The Blank:
GDPR makes it clear that pre-………….. boxes are not valid ……………
Marketing Consent
Ticked, Consent
Explain:
Higher Maximum penalty that can be issued by ICO
Enforcement
Failure to comply with core data protection principles or individuals rights as in DPA
£17.5m or 4% of total annual worldwide turnover in preceding financial year (whichever is higher)
Explain:
Standard penalty that can be issued by ICO
Enforcement
All other infringements other than what is covered in Higher max. penalty (breaching core data protection principles)
£8.7m or 2% of totalannual worldwide turnover in preceding financial year (whichever is higher)
