Skip to content

ACCA Applied Knowledge · Business and Technology · Regulation and financial crime

A bank's customer service employee, who has no business reason to do so, looks up the account details of a celebrity customer out of curiosity. Which statement is MOST accurate?

The employee has breached confidentiality and data protection principles. Access to personal data must be limited to what the job requires, so looking up an account out of curiosity is unauthorised use even without disclosure to anyone else and even though the system technically allowed access.

  1. AThere is no issue because the employee has legitimate system access
  2. BThis breaches the confidentiality and data protection principles because access to personal data must be limited to what is necessary for the jobCorrect
  3. CThis is a breach only if the employee discloses the information to a third party

Explanation

Having system access does not authorise any use of data. Personal data may be processed only for legitimate purposes, and confidentiality duties apply to unnecessary access as well. Disclosure to a third party is not required for a breach to arise, so that option is wrong.

Did you get it right without looking?

One question tells you little. A timed set on Regulation and financial crime shows your real accuracy, how long you take and where you lose marks.

Practise Regulation and financial crimeFree diagnostic mock

More Regulation and financial crime questions