CCEA A-Level Professional Business Services 3210
The Business Environment
The Professional Business Services Sector
The Consultancy Process
Understanding the Client's Market
Client Relationships
Business Ethics
Persuading, Negotiating and Influencing
Business Planning and Risk Management
Government Regulation
Organisational Structure and Culture
Recruitment and Selection
Learning and Development
Employee Well-Being and Motivation
Managing Conflict
Business Research Methods
Sources of Finance
Cash Flow
Financial Statements
Ratio Analysis
Investment Appraisal and Financial Decisions
IT Systems and Communication Technology
Technology for People and Operations
Technology for Finance and Disaster Recovery
Big Data and the Ethics of Technology
Leadership and Management
Managing Teams
Managing Change
Project Management and Feasibility
Project Initiation and Planning
Technology for Finance and Disaster Recovery
Legislation on data and technology
- 3 things to know
- A2 1
Overview
Data controllers and processors under the Data Protection Act 2018 and UK GDPR, individuals' rights, breach reporting, the Computer Misuse Act, copyright, display screen rules, the Privacy and Electronic Communications Regulations and the Communications Act.
What you need to know
Answer each one before you reveal it.
Under the Data Protection Act 2018 and UK GDPR, how does a data controller differ from a data processor?
What is personal data?
Questions from this subtopic
Each one with the model answer underneath.
- 1
Under the Data Protection Act 2018 and UK GDPR, how does a data controller differ from a data processor?
Model answer
A data controller decides why and how personal data is processed. A data processor handles the data on the controller's behalf, such as a cloud payroll provider.
- 2
What is personal data?
Model answer
Personal data is any information relating to an identified or identifiable living person. Names, email addresses and client account numbers are examples.
- 3
State four principles of UK GDPR for handling personal data.
Model answer
Personal data must be processed lawfully, fairly and transparently, and only for stated purposes. The data must also be limited to what is needed and kept accurate.
- 4
State three rights individuals have over their personal data.
Model answer
Individuals can access the data held about them. Individuals can also have inaccurate data corrected and, in some cases, have data erased.
- 5
How long does an organisation have to respond to a subject access request?
Model answer
An organisation normally has one month to respond. The period can be extended for complex or numerous requests.
- 6
When must a personal data breach be reported to the ICO?
Model answer
A breach likely to risk people's rights and freedoms must be reported within 72 hours of discovery. Individuals at high risk must also be told without undue delay.
Other ways to work this
The same content, four other ways.
What is inside Levo
Six ways to work the same material.
Every question in Technology for Finance and Disaster Recovery, on a schedule.
Attempt a question from memory, write the correct version, then attempt it again. Levo records the jump between your first attempt and your last, and brings each question back on the day you are due to forget it.
Or £46 a year, about £3.83 a month. Cancel anytime.