10. information and data

• What is the General Data Protection Act 2018 designed to protect?

  Personal data
• What are examples of personal data?

  Name, address, date of birth
• What qualifies as sensitive personal data?

  Race, ethnicity, political opinions
• What type of data includes contact details and purchase history?

  Client data
• What does the Data Protection Act 208 protect?

  Client data
• What is intellectual property?

  Creations of the mind
• What does material created in employment belong to?

  Employer, not employee
• What do patents protect in land-based industries?

  Plant varieties and genetically modified crops
• What rights do individuals have regarding their data?

  To be informed about data processing
• What can individuals request regarding their personal data?

  Erasure of personal data
• What are the consequences of non-compliance with data protection laws?

  Financial penalties and legal action
• What is the range of fines for non-compliance?

  £2-4.1 million
• What are some methods businesses use to manage information?

  Paper-based systems and spreadsheets
• Why is staff training important in data protection?

  To understand risks associated with mishandling data
• What is version control?

  Managing different versions of a document
• What do access controls do?

  Restrict access to sensitive data
• What is indexing in data management?

  Creating an index or catalogue of data
• What are best practices for managing data?

  • Use centralized data management systems
  • Conduct regular checks
  • Keep data up to date
  • Ensure cybersecurity measures are in place
  • Train staff to standard
• What is the purpose of encryption in data management?

  To secure sensitive information
• What is the role of malware detection in data security?

  To identify and prevent malicious software
• What is the significance of regular checks in data management?

  To ensure data accuracy and security
• How does a centralized data management system benefit businesses?

  It streamlines data access and management
• What does personal data refer to?

  Information that relates to an identifiable individual
• What legislation governs data protection in the UK?

  Data Protection Act 2018
• What does GDPR stand for?

  General Data Protection Regulation
• What are intellectual property creations of the mind protected by?

  Copyright and trademark laws
• How do businesses manage information and data?

  • Staff training to improve understanding
  • Follow current policies (GDPR)
  • Version control to ensure accuracy
• What should businesses do in response to security breaches?

  Review policies like updating passwords
• What is a key action to take after a security breach?

  Update firewalls and antivirus protection
• What is the purpose of the Data Protection Act 2018?

  Support lawful processing of personal data
• What does GDPR aim to protect?

  Personalized individual data
• How does GDPR regulate organizations?

  Regulates how organizations process individual data
• What does GDPR prevent organizations from doing?

  Sharing or selling personal data without consent
• What is the role of the Data Protection Authority (DPA)?

  Oversee compliance with data protection laws
• What are common types of cyber threats?

  Cyberattacks, phishing, malware, trojans
• What is a method to protect against cyber threats?

  Implement encryption and access controls
• How long should personal data be kept?

  For no longer than necessary
• What rights do individuals have regarding their personal data?

  Access, correct, erase, and restrict processing
• What must personal data be used for according to data protection principles?

  Specified purposes only
• How should personal data be handled?

  Fairly, lawfully, and transparently