Q1. Compare and contrast the Data Protection Act 2018 with your country’s
data privacy laws. If you are an EEA citizen or your country does not have any
privacy legislation enacted, then compare and contrast the Data Protection Act
2018 with the California Consumer Privacy Act. (40 marks)
OR
Q2. Under the GDPR, prior notification of personal data processing by the data
controller has been removed. Explain five differences around notification in the
Data Protection Act 1998 and the GDPR. (40 marks)
OR
Q3. A local council has decided to outsource its customer telephone
enquiries to a company running a call centre in the UK. What will the Data
Protection Officer at the council need to do to ensure that the call centre is
compliant with the Data Protection Act 2018? (40 marks)
OR
Q4. A social media site is being launched in the UK to cater for the
attitudes, values, perceptions, beliefs and behaviours of 14 year-old girls
interested in fashion and music. The new service is keen to comply with the Data
Protection Act 2018 and wants to avoid any negative media coverage that some
of its competitors has attracted. It has designed a Data Privacy Notice (DPN)
explaining the legal rights and freedoms for data subjects. It relies on the consent
of the parent and guardian in order to deliver the service. What mistake (if any)
has the social media site made?