ICAEW SE · Chapter 10 · Question 2 of 10
A company collects customers' dates of birth, home addresses and employment details when it only needs an email address to send a newsletter. Which data protection principle is it failing to apply?
Test yourself: pick an answer
Reveal answer & explanation
Correct answer: A) Data minimisation
Explanation
Data minimisation requires personal data to be adequate, relevant and limited to what is necessary for the purposes for which it is processed. Collecting detailed personal information to send a newsletter goes beyond what is needed. The other principles relate to keeping data correct, not keeping it longer than necessary, and keeping it secure.
More Data ethics and the impact of technology MCQs
- Q4A bank trains an algorithm to assess loan applications using historical lending decisions, which had disadvantaged applicants from certain…
- Q5A management accountant is given sustainability data from a supplier to include in the company's report. Which action best reflects the…
- Q6A company uses a complex artificial intelligence (AI) model to make credit decisions, but cannot explain to rejected applicants why they…
- Q7An accountant uses an AI tool to draft a client's disclosure notes. The draft looks professional but cites an accounting standard…
- Q8What is the main purpose of data protection legislation such as the UK GDPR and the Data Protection Act 2018?