Lesson 4The GDPR principles of data protection
- Notion 26 - The importance of the personal data processing principles
- Notion 27 - First GDPR principe: lawfulness, fairness, transparency
- Notion 28 - Second GDPR principle: purpose limitation
- Notion 29 - Third GDPR principle: data minimization
- Notion 30 - Fourth GDPR principle: accuracy
- Notion 31 - Fifth GDPR principle: storage limitation
- Notion 32 - Sixth GDPR principle: integrity and confidentiality.
- Notion 33 - Seventh GDPR principle: accountability
- Notion 34 - Review of the main concepts.
Notion 34
Review of the main concepts.
Target skills
Now that we’ve gone over the main concepts on the GDRP, take this short quiz to review what you’ve learned and assess your knowledge.
What is user-generated data (UGD)? Choose the correct statement.
Good job!
UGD is any content that has been created, published and/or submitted by individuals (not brands) in the form of text, videos, images, reviews, etc. and is uploaded to online platforms.
The .................. came into force in May 2018 and is the toughest privacy and security law in the world. Complete the sentence.
Good job!
The GDRP it was drafted and passed by the European Union (EU) and came into force in May 2018. These regulations impose obligations on organisations anywhere in the world, so long as they target or collect data related to people in the EU.
Choose the statement which is NOT correct
Good job!
The General Data Protection Regulation (GDRP) came into force in May 2018, is the toughest privacy and security law in the world. Even though it was drafted and passed by the European Union (EU), it imposes obligations on organizations anywhere in the world, so long as they target or collect data related to people in the EU.
The statement "Those who process data should not have more information than needed to reach the purposes of this data processing" refers to which principle?
Good job!
Article 5 of GDPR states that personal data must be: "adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (data minimisation)”.
What is the amount of time an organisation (e.g. a bank) should hold an individual's personal information (data)? Chose from the following options:
Good job!
The GDRP law does not set specific time limits for different types of data. Therefore, organisations should determine the period of time when an individual’s personal data is retained.