CIPP/E Study guides, Class notes & Summaries

OECD - Purpose Specification Answer The purposes for which personal data are collected should be specified not later than at the time of collection and the subsequent use limited to the fulfilment of those purposes as specified o each occasion of change of purpose. What is the fundamental basis of the relationship between employer and employee in the U.S. Answer Contract Law Information Life Cycle Phases Answer 1. Collect/Derive 2. Use/Process 3. Disclose/Transfer 4. Store/Retain/Arc...

Accountability The implementation of appropriate *technical and organisational measures* to ensure and be able to *demonstrate* that the handling of personal data is performed in accordance with relevant law, an idea codified in the EU General Data Protection Regulation and other frameworks, including APEC's Cross Border Privacy Rules. Traditionally has been a *fair information practices principle*, that due diligence and reasonable steps will be undertaken to ensure that personal information w...

Supervisory authorities data protection authorities Article 51(1)(u) requires dpas to keep records of any infringements of the Regulation, as well as records of any actions taken under Article 58(2). The keeping of these records is already a standard practice across the member states, and, indeed, they provide a primary source material for the regulators when devising their national and collective work programmes. Moreover, in some jurisdictions, such as the UK, the dpas consider the regulatory...

Universal Declaration of Human Rights (UDHR) (1948) first international legal instrument announcing the right to privacy (Article 12), catalyst for other human rights instruments in Europe European Convention on Human Rights (ECHR) (1950) international treaty to protect human rights and fundamental freedoms, right to privacy (Article 8) and many more protections of a wide scope Treaty of Rome (1957) established the European Economic Area (EEA, member states plus Iceland, Lichtenstein, and Norw...

Prohibition of cross border data transfers under Data Privacy Directive 95/46/EC apply when data transferred from a jurisdiction in the EU to a third country. What treaty or convention allowed the Data Protection Directive 95/46/EC to be used as a harmonising measure for European Member states. The Treaty of Rome Direct marketing would include: Email promoting new book on sale. What two opposing forces needed to be considered in formulating a privacy framework in the European Economic Communi...

A German data subject was the victim of an embarrassing prank 20 years ago. A newspaper website published an article about the prank at the time, and the article is still available on the newspaper's website. Unfortunately, the prank is the top search result when a user searches on the victim's name. The data subject requests that SearchCo delist this result. SearchCo agrees, and instructs its technology team to avoid scanning or indexing the article. What else must SearchCo do? (A). Notify ...

SCENARIO: Granchester University & Student RecordsANSWER THESE CARDS IN ORDER AND USE THE NEXT CARD FOR THE FOLLOWING QUESTIONS SCENARIO: Granchester University & Student Records Anna and Frank both work at Granchester University. Anna is a lawyer responsible for data protection, while Frank is a lecturer in the engineering department. The University maintains a number of types of records: Student records, including names, student numbers, home addresses, pre-university information, university...

Which statement is correct when considering the right to privacy under article 8 of the European Convention on Human Rights? The right to privacy has to be balanced against other rights under the ECHR What is the one major goal that the OECD Guidelinges, Convention 108, and the Directive all had in common but largely failed to achieve in Europe? The restriction of cross-border data flow Which EU institution is vested with the competence to propose new data protection legislation on its own ini...

Convention 108 was opened by who? The Council of Europe What did the Council of Europe open for Signatories? Convention 108 Failure to respond to the Council's 1973 & 1974 resolutions and the need for reinforcement of the principles found in those resolutions by means of a binding international instrument lead to what? The opening of Convention 108 How many articles and parts does Convention 108 comprise of? 27 Articles and three main parts Why was Convention 108 updated in 2018? To reinfor...

Rationales for Data Protection 1) Increase in internet use 2) databanks more prevalent 3) Telecommunications allow internet across borders 4) Cross border sharing made sharing more prevalent which makes misuse more likely 5) Sharing data is generally a good thing for society 6) Balance free trade and personal privacy E.U. v U.S. difference in Fundamental Right to Privacy In E.U. it is a fundamental right. It is also a fundamental right under the Universal Declaration of Human Rights (adopted by...

IAPP International Association of Privacy Professionals - founded in 2000 GDPR Global Data Privacy Regulation - May 2018 - states can make further legislation - stronger rights for online environment - SA have increased powers - broader application - anyone targeting EU cust - 173 recitals, 99 articles, 11 chapters Rational for Data Protection Increase in computers in 1970 and cross-border trade EEC European Economic Community Human Rights Declaration 1948 after WWII - right to private and f...