ACCA Applied Knowledge · Business and Technology · Regulation and financial crime
Under the data protection principles commonly applied in regulations such as the UK/EU GDPR, a retailer collected customers' email addresses to send order confirmations and later used them for unrelated marketing by a partner firm. Which principle has most clearly been breached?
The purpose limitation principle has been breached. Personal data must be collected for specified and legitimate purposes and not used in a way incompatible with them. Emails supplied for order confirmations were reused for unrelated third-party marketing, which goes beyond the original purpose.
- AAccuracy
- BStorage limitation
- CPurpose limitationCorrect
- DIntegrity and confidentiality
Explanation
Data must be collected for specified, explicit and legitimate purposes and not further processed in an incompatible way. Using addresses given for order confirmations for third-party marketing breaches purpose limitation. Storage limitation concerns keeping data no longer than necessary, which is not the issue here.
Did you get it right without looking?
One question tells you little. A timed set on Regulation and financial crime shows your real accuracy, how long you take and where you lose marks.
More Regulation and financial crime questions
- A bank's customer service employee, who has no business reason to do so, looks up the account details of a celebrity customer out of curiosi…
- Which of the following is a typical data protection principle, as found in laws such as the EU GDPR, that personal data should meet?
- Sanjay, an accountant at Orion Co, discovers that a director has been paying 'facilitation' amounts to a foreign official to speed up custom…
- Which of the following is an example of legitimate tax avoidance rather than tax evasion?
- Which of the following best describes the purpose of a whistleblowing policy within a company?
- Which of the following best describes the 'fraud triangle', used to explain why fraud occurs?