21---Data-Protection.pptx

• newEditor

1 Starter

In this lesson, we will look at:

• Data Protection Act

• Data subjects’ rights

• Intellectual property

General Data Protection Regulation (GDPR) is a regulation in European Union law surrounding data protection and privacy. It was implemented across the EU, including in the United Kingdom as the 2018 Data Protection Act. This means it is still in effect post-Brexit.

The law is aimed to protect individuals and give them more control over their personal data by ensuring organisations follow eight key principles.

2 Data Protection Act

Data must be:

1. collected and stored in a way that is fair and lawful

1. specific for its purpose and organisations must state how they will use it

1. only the minimum amount needed

1. accurate and kept up to date

1. kept only as long as is necessary

1. accessible under the data subjects' rights

1. stored in a way that is safe and secure

1. never transferred to countries with less protection

One of the main functions of the Data Protection Act 2018 is to protect the rights of a data subject; the person whom the data being stored is about.

The data subject is given the right to:

▪ request to view the data stored about them by an organisation

▪ withdraw consent - which stops the use of their data

▪ make changes to data that is inaccurate

▪ be forgotten - which allows data to be deleted at the subject's request

3 Data subjects’ rights

Any asset (belonging), which is not physical, is considered intellectual property and includes written works, artistic works, music and video games.

Organisations and individuals have several options for protecting their intellectual property.

4 Intellectual property

A car insurance company sells policies to customers all over the UK.

The car insurance company stores personal data about its customers.

There are a number of data protection principles that are designed to protect a customer's personal data.

These principles are enforced by UK legislation.

Assess what the company will need to do to make sure it follows the data protection principles and UK legislation. [9]

5 Exam question

Buyable Crafts is a company that makes and sells craft items.

It uses its own designs for the items.

Buyable Crafts stores customers' personal details on its systems.

It must abide by UK legislation governing data protection.

One of the principles it must follow is called 'data subject rights'.

Explain one example of a 'data subject right'. [2]

6 Exam question

Jim has his own personal training business.

Jim has created a logo for his business.

The logo and training plans are examples of his intellectual property.

Explain two ways Jim can protect his intellectual property. [4]

7 Exam question

Buyable Crafts is a company that makes and sells craft items.

It uses its own designs for the items.

Buyable Crafts has copyright protecting its designs.

Explain two ways that copyright can protect its designs. [4]

8 Exam question