1.
How many data protection principles are there?
Correct Answer
D. Eight
2.
Which of the following should you NOT do with data whilst at work?
Correct Answer(s)
A. Access ‘personal data’ that you do not need for your work
D. Record ‘personal data’ for your own use outside of work
Explanation
The correct answer is to access 'personal data' that you do not need for your work and to record 'personal data' for your own use outside of work. These actions violate data protection principles and can lead to breaches of privacy and confidentiality. It is important to only access and use personal data that is necessary for your work tasks and to handle it responsibly and securely.
3.
Which of the following does not constitute ‘sensitive data’? Data consisting of information about....
Correct Answer
B. ...an individual's home address
Explanation
An individual's home address does not constitute 'sensitive data' because it is considered to be personal information rather than sensitive information. Sensitive data typically refers to information that, if disclosed or compromised, could cause harm or distress to an individual. While a home address is private, it does not typically fall into the category of sensitive data as it does not carry the same level of potential harm or risk if disclosed.
4.
Who is the FirstInfo Data Protection Officer?
Correct Answer
C. Debbie Smith
Explanation
Debbie Smith is the FirstInfo Data Protection Officer because she is the only option provided in the given list.
5.
What is 'personal data' considered to be under the DPA?
Correct Answer
D. Name, address contact details and date of birth
Explanation
Personal data is considered to be any information that can be used to identify an individual. This includes their name, address, contact details, and date of birth. Height, weight, appearance, racial or ethnic origin, religious beliefs, political opinion, physical or mental health, and criminal offenses are also examples of personal data, but the correct answer specifically focuses on the basic identifying information of an individual.
6.
What are we not allowed to do with 'sensitive data'?
Correct Answer
D. All of the above
Explanation
The correct answer is "All of the above". This means that we are not allowed to collect, store, or disclose sensitive data without permission or appropriate checks. Sensitive data refers to information that is private, confidential, or personal, and it is important to respect individuals' privacy and adhere to data protection regulations when handling such data.
7.
What do we charge a customer that wants us to send them any data that we hold about them?
Correct Answer
C. £10
Explanation
The correct answer is £10. This suggests that the company charges a flat fee of £10 to customers who request to receive any data that the company holds about them. This fee is not dependent on the number of data items requested, as there is no mention of a per-item charge.
8.
What form must you send the customer if they want any data that we hold about them?
Correct Answer
A. A 'Subject Access Request' form
Explanation
To comply with data protection regulations, individuals have the right to request access to their personal data held by an organization. This is done through a 'Subject Access Request' form. By filling out this form, the customer can formally request the data that the organization holds about them. This form ensures that the customer's request is properly documented and processed, allowing the organization to provide the requested information in a secure and timely manner.
9.
Which of the following is an example of 'sensitive data'?
Correct Answer
A. Criminal record
Explanation
A criminal record is considered sensitive data because it contains personal information about an individual's criminal history, which can have significant implications on their reputation, privacy, and potential opportunities. Access to this information is usually restricted to authorized individuals or organizations due to its sensitive nature.