levo

Technology for Finance and Disaster Recovery

Legislation on data and technology

  • 3 things to know
  • A2 1

Overview

Data controllers and processors under the Data Protection Act 2018 and UK GDPR, individuals' rights, breach reporting, the Computer Misuse Act, copyright, display screen rules, the Privacy and Electronic Communications Regulations and the Communications Act.

What you need to know

Answer each one before you reveal it.

Your recallNot started
Evaluation

Evaluate how well data protection law protects the clients of a Belfast accountancy practice.

Process

Under the Data Protection Act 2018 and UK GDPR, how does a data controller differ from a data processor?

Key term

What is personal data?

Questions from this subtopic

Each one with the model answer underneath.

  1. 1

    Under the Data Protection Act 2018 and UK GDPR, how does a data controller differ from a data processor?

    Model answer

    A data controller decides why and how personal data is processed. A data processor handles the data on the controller's behalf, such as a cloud payroll provider.

  2. 2

    What is personal data?

    Model answer

    Personal data is any information relating to an identified or identifiable living person. Names, email addresses and client account numbers are examples.

  3. 3

    State four principles of UK GDPR for handling personal data.

    Model answer

    Personal data must be processed lawfully, fairly and transparently, and only for stated purposes. The data must also be limited to what is needed and kept accurate.

  4. 4

    State three rights individuals have over their personal data.

    Model answer

    Individuals can access the data held about them. Individuals can also have inaccurate data corrected and, in some cases, have data erased.

  5. 5

    How long does an organisation have to respond to a subject access request?

    Model answer

    An organisation normally has one month to respond. The period can be extended for complex or numerous requests.

  6. 6

    When must a personal data breach be reported to the ICO?

    Model answer

    A breach likely to risk people's rights and freedoms must be reported within 72 hours of discovery. Individuals at high risk must also be told without undue delay.

Other ways to work this

The same content, four other ways.

What is inside Levo

Six ways to work the same material.

1Closed book
2Open book
3Closed book

See a huge jump in your memorisation

Answer cold, learn it, then prove it stuck. Levo tracks the jump between your first attempt and your last.

The Business Environment
The Professional Business Services Sector
The Consultancy Process
Understanding the Client's Market

Cram a whole paper in one sitting

Sort every topic into what you know and what you do not, then drill only the weak ones.

A payback is usually preferred.
shorterlongerslower

Blank Blitz consolidates the facts

Rapid timed gap-fills on the terms and numbers you need to recall without thinking.

AA firm might move its staff to a new office.
BA firm might install a new client database.
CA firm might run a graduate recruitment campaign.

Build It trains answer structure

Assemble a full-mark answer from its marking points, in the order an examiner wants them.

Equity means the owner's investment in the business.
TrueFalse

Test It catches misconceptions

Spot the fault in a statement. The traps are the mistakes students actually make.

721941163128510

Brain Breaks between sessions

Short focus games to reset attention, so the next set lands better than the last.

Every question in Technology for Finance and Disaster Recovery, on a schedule.

Attempt a question from memory, write the correct version, then attempt it again. Levo records the jump between your first attempt and your last, and brings each question back on the day you are due to forget it.

Or £46 a year, about £3.83 a month. Cancel anytime.