Which of the following principles is usually recommended for inclusion in legislation on data protection?
a-All personal data held by data users should be reviewed regularly and automatically deleted after a specified period of time
b-The data user should provide the data subject with regular and detailed information on the data held
c-All personal data held by data users should be updated by checking this data with the subject at regular intervals
d-All personal data held by data users should be adequate for the purposes of the data user but not excessive
why is the correct answer d?
aren't all answers correct?
Ask the Tutor ACCA BT
External analysis- political and legal
We are talking about legislation, not what we might think is reasonable. Only (d) is mentioned in the Data Protection Act
(a) No requirement for automatic deletion
(b) No requirement unless asked by data subject
(c) No. It should be accurate but no proactive checking with the data subject is required.
See P42 of the notes.
Sign in to reply to this topic.
