Data Management

Question 1

What legislation governs personal data processing in the UK?

Answer 1

The Data Protection Act 2018, which replaces the 1998 Act and implements GDPR.

Question 2

What are the key principles of GDPR?

Answer 2

ASIA LMP
Accuracy, Storage, Integrity (and Confidentiality), Accountability, Lawfulness, Minimisation, Purpose,

Question 3

What rights do individuals have under the Data Protection Act?

Answer 3

REPAIR OA
Restrict, Erasure, Portability, Access, Informed, Rectification, Object, Automated decisions

Question 4

What do the Freedom of Information Acts (2000 & 2005) provide?

Answer 4

Public access to information held by public authorities. Authorities must confirm if they hold the data and respond within 20 working days. Information must be published via a publication scheme. Covers all held information, not just post-legislation data.

Question 5

What are the types of Client Relationship Management (CRM)?

Answer 5

• Strategic CRM: Long-term relationship building.
• Operational CRM: Personalised service and documentation.
• Analytical CRM: Data analysis to improve targeting.

Question 6

What are the roles defined under GDPR?

Answer 6

• Controller: Determines purpose and means of processing.
• Processor: Acts on behalf of the controller.
• Data Protection Officer (DPO): Oversees compliance and strategy.

Question 7

What are the lawful bases for processing personal information?

Answer 7

• Consent
• Contract
• Legal obligation
• Public task
• Legitimate interests
• Vital interests