Why data protection laws exist
Organisations collect huge amounts of data about us: schools, doctors, shops, apps.
A data protection act is a law that controls how organisations collect, store and use personal data.
The person the data is about is called the data subject. The organisation that controls it is the data controller.
In Spain the GDPR (the EU's General Data Protection Regulation) applies, alongside Spain's own law, the LOPDGDD. The UK uses the Data Protection Act 2018.
?Why?Without rules, data could be sold, leaked or used to treat people unfairly. The laws give people rights and give organisations duties.
!Watch outCambridge asks for the general principles, not the details of one country's law. Learn the principles in the next step.
The data protection principles
Most data protection laws share the same principles. Learn this list for the exam.
Personal data must be:
e.g.ExampleExam style: 'A school stores student records. Describe three principles it must follow.'
Answer: the data must be kept secure (for example passwords and encryption); it must be accurate and up to date; it must not be kept longer than necessary (deleted when a student leaves after the set time).
Personal data and sensitive data
Personal data is any data about a living person who can be identified from it.
Sensitive personal data is personal data that could be used to treat someone unfairly, or cause them harm, if it got out. It needs extra protection.
Leaked sensitive data can lead to discrimination, bullying or blackmail.
!Watch outBank details are personal and must be protected, but in data protection law they are not in the 'sensitive' list. Sensitive data is about who a person is: health, beliefs, ethnicity and so on.
Why eSafety matters
eSafety means using the internet and digital devices in a way that keeps you, your data and others safe.
Without it, people risk identity theft, fraud, grooming, cyberbullying and seeing harmful content.
Young people are a special target because they may share too much and trust strangers online.
?Why?Once something is posted online it can be copied and kept forever. A careless post at 14 can still be found by an employer at 24.
Safe use of the internet and email
The same ideas repeat: protect personal data, do not trust strangers, and tell a trusted adult if something feels wrong.
?Why?Most attacks start with one careless click. Checking the sender and the web address before acting blocks most of them.
Safe use of social media and online gaming
Social media and games connect you with strangers, so they need extra care with what you share.
Exam answers should name the platform risk and the precaution together.
e.g.ExampleA student posts: 'Off to Valencia for two weeks! Flat empty, ha ha' with a photo outside her block.
Risks: burglars now know the flat is empty and where it is.
Safer: post the holiday photos after returning, with location turned off.