CCEA A-Level Digital Technology 2650
Systems Analysis and Development Approaches
Design, Development and Testing
Implementation and System Security
Programming
Data, Information and Data Representation
Computer Architecture and Processing Systems
System Software, Application Software and the User Interface
Web Technology and Multimedia
Networks
Databases
Artificial Intelligence, Expert Systems and Robotics
Mobile Technology, Data Mining and Cloud Computing
Individual, Social and Legal Considerations
The Development Project: Analysis and Design
The Development Project: Build, Testing and Evaluation
Individual, Social and Legal Considerations
Data protection duties of an organisation
- 3 things to know
- A2 Unit 1
Overview
Data protection impact assessment and personal data breach.
What you need to know
Answer each one before you reveal it.
What must be in place before a controller uses a processor?
Why must a controller keep records of its processing activities?
Questions from this subtopic
Each one with the model answer underneath.
- 1
What must an organisation tell people at the point it collects their data?
Model answer
An organisation must provide a privacy notice setting out who it is, why the data is needed, the lawful basis for holding it, who it will be shared with, how long it will be kept and what rights the individual has.
- 2
Why must a controller keep records of its processing activities?
Model answer
A record describing the categories of data held, the purposes, the recipients and the retention periods is how a controller demonstrates compliance under the accountability principle when the regulator asks.
- 3
When must an organisation appoint a data protection officer?
Model answer
An organisation must appoint a data protection officer if it is a public authority, if its core activities involve monitoring people systematically on a large scale, or if it processes special category data on a large scale.
- 4
What does a data protection officer do?
Model answer
A data protection officer advises the organisation on its obligations, monitors compliance and is the contact point for the regulator. The officer must be able to report to the most senior management without being penalised for the advice given.
- 5
What is a data protection impact assessment?
Model answer
A data protection impact assessment is carried out before high-risk processing begins, describing what is proposed, assessing the risk it creates for individuals and setting out the measures that will reduce that risk.
- 6
Give two situations in which a data protection impact assessment is required.
Model answer
An assessment is required before large-scale monitoring of a publicly accessible area begins. The same applies before decisions with a significant effect on people are taken by automated means.
Other ways to work this
The same content, four other ways.
What is inside Levo
Six ways to work the same material.
Every question in Individual, Social and Legal Considerations, on a schedule.
Attempt a question from memory, write the correct version, then attempt it again. Levo records the jump between your first attempt and your last, and brings each question back on the day you are due to forget it.
Or £46 a year, about £3.83 a month. Cancel anytime.