ACCA Applied Knowledge · Business and Technology · The impact of advances in technology
A retailer holds customer personal data and wants to follow good data protection practice. Which action best reflects the principle of data minimisation?
Collecting only the personal data needed for the stated purpose reflects data minimisation. The principle requires that data be adequate, relevant and limited to what is necessary. Encryption is a security measure and access by customers is a subject right, while indefinite retention conflicts with the principle.
- AKeeping all customer data indefinitely in case it is useful later
- BCollecting only the personal data needed for the stated purposeCorrect
- CEncrypting all customer data stored on laptops
- DAllowing customers to view the data held about them
Explanation
Data minimisation means collecting and holding only the personal data that is adequate and necessary for the stated purpose. Encryption relates to security, and allowing access relates to data subject rights; keeping data indefinitely contradicts minimisation and storage limitation.
Did you get it right without looking?
One question tells you little. A timed set on The impact of advances in technology shows your real accuracy, how long you take and where you lose marks.
More The impact of advances in technology questions
- A company automates its sales order processing so that orders flow from the website through to dispatch and invoicing without manual re-keyi…
- An employee at a firm uses a personal smartphone to access client records through a cloud service, and the phone is later lost. Which risk i…
- A company's staff all use the same simple password for the accounting system, and former employees' accounts remain active. Which category o…
- An employee receives an email that appears to come from the finance director, asking for urgent bank details of a supplier to be changed via…
- A manufacturer automates its payroll processing. Which is the most likely control-related benefit?
- Which of the following is a typical reason a business might introduce workflow automation for its sales order process?