Skip to content

ACCA Applied Knowledge · Business and Technology · The impact of advances in technology

A company holds personal data about customers in several countries. Which of the following BEST reflects a generally accepted data protection principle that the company should follow?

The accepted principle is that personal data should be kept only as long as necessary for the purpose it was collected for. Indefinite retention, excessive collection and unrestricted sharing all conflict with the principles of storage limitation, data minimisation and purpose limitation.

  1. APersonal data should be kept only as long as necessary for the purpose for which it was collectedCorrect
  2. BPersonal data may be retained indefinitely if it might become useful for future marketing
  3. CPersonal data should be collected in as large a volume as possible to improve analytics
  4. DPersonal data should be shared freely within the group without regard to its original purpose

Explanation

Data protection regimes such as GDPR-style rules include storage limitation: data is kept no longer than needed for its stated purpose. The other options contradict data minimisation and purpose limitation, which require collecting only what is needed and using it only for specified purposes.

Did you get it right without looking?

One question tells you little. A timed set on The impact of advances in technology shows your real accuracy, how long you take and where you lose marks.

More The impact of advances in technology questions