Data Protection Principles

Question 1

What does the GDPR require everyone to ensure there personal data is?

Answer 1

• Used fairly, lawfully and transparently.
• Used for specified, expllicit purposes.
• Used in a way that is adequate, relevant, and limited to only what is necessary.
• Accurate and, where necessary, kept up to date
• Kept for no longer than is necessary
• Handled in a way that ensures appropriate security, including protection against unlawful or unauthorised processing, access, loss, destruction or damage

Question 2

If a person is unhappy how their data is being used by an organisation who can they complain to?

Answer 2

ICO, If ICO determines the data protecting requirements have not been complied with, it can take legal action and/or fine the organisation or business.