levo

Individual, Social and Legal Considerations

Data protection duties of an organisation

  • 3 things to know
  • A2 Unit 1

Overview

Data protection impact assessment and personal data breach.

What you need to know

Answer each one before you reveal it.

Your recallNot started
Key term

What must an organisation tell people at the point it collects their data?

Process

What must be in place before a controller uses a processor?

Process

Why must a controller keep records of its processing activities?

Questions from this subtopic

Each one with the model answer underneath.

  1. 1

    What must an organisation tell people at the point it collects their data?

    Model answer

    An organisation must provide a privacy notice setting out who it is, why the data is needed, the lawful basis for holding it, who it will be shared with, how long it will be kept and what rights the individual has.

  2. 2

    Why must a controller keep records of its processing activities?

    Model answer

    A record describing the categories of data held, the purposes, the recipients and the retention periods is how a controller demonstrates compliance under the accountability principle when the regulator asks.

  3. 3

    When must an organisation appoint a data protection officer?

    Model answer

    An organisation must appoint a data protection officer if it is a public authority, if its core activities involve monitoring people systematically on a large scale, or if it processes special category data on a large scale.

  4. 4

    What does a data protection officer do?

    Model answer

    A data protection officer advises the organisation on its obligations, monitors compliance and is the contact point for the regulator. The officer must be able to report to the most senior management without being penalised for the advice given.

  5. 5

    What is a data protection impact assessment?

    Model answer

    A data protection impact assessment is carried out before high-risk processing begins, describing what is proposed, assessing the risk it creates for individuals and setting out the measures that will reduce that risk.

  6. 6

    Give two situations in which a data protection impact assessment is required.

    Model answer

    An assessment is required before large-scale monitoring of a publicly accessible area begins. The same applies before decisions with a significant effect on people are taken by automated means.

Other ways to work this

The same content, four other ways.

What is inside Levo

Six ways to work the same material.

1Closed book
2Open book
3Closed book

The 3-step method, run for you

Answer cold, learn it, then prove it stuck. Levo tracks the jump between your first attempt and your last.

Systems Analysis and Development Approaches
Design, Development and Testing
Implementation and System Security
Programming

Cram a whole paper in one sitting

Sort every topic into what you know and what you do not, then drill only the weak ones.

A check requires a value.
presencerangeformat

Blank Blitz makes facts automatic

Rapid timed gap-fills on the terms and numbers you need to recall without thinking.

ANormal data is 12, which should be accepted.
BBoundary data is 1 and 50, which should be accepted.
C0 and 51, just outside the limits, should be rejected.

Build It gets the exam shape right

Assemble a full-mark answer from its marking points, in the order an examiner wants them.

One byte is made up of 8 bits.
TrueFalse

Test It catches misconceptions

Spot the fault in a statement. The traps are the mistakes students actually make.

721941163128510

Brain Breaks between sessions

Short focus games to reset attention, so the next set lands better than the last.

Every question in Individual, Social and Legal Considerations, on a schedule.

Attempt a question from memory, write the correct version, then attempt it again. Levo records the jump between your first attempt and your last, and brings each question back on the day you are due to forget it.

Or £46 a year, about £3.83 a month. Cancel anytime.