Data Protection Principles, Rights and Breaches
Apply the six data-protection principles, individual rights and breach notification requirements.
How to prepare for UK Financial Regulation
Use 601 original multiple-choice questions to apply the regulatory perimeter, client conduct, professional ethics, market-integrity controls, complaints, compensation, data and whistleblowing requirements. The bank contains no recalled, past-paper or secure CISI items.
Core concepts
Concept 1
Explain the six data-protection principles in the DPA 2018 and UK GDPR framework.
Exam cue: Identify controller, processor, data subject and data.
Concept 2
Identify individual rights relating to collection and use of personal data.
Exam cue: Test purpose, lawful handling, minimisation, accuracy, retention and security.
Concept 3
Apply breach assessment, notification and reporting requirements.
Exam cue: Assess breach risk, record and notification duties.
Risk pitfalls and guardrails
Treating consent as the only lawful basis.
Guardrail: Do not confuse regulator roles, firm permission with individual competence, suitability with appropriateness, FOS with FSCS or an official element weight with an internal topic allocation.
Keeping personal data indefinitely because storage is inexpensive.
Guardrail: Do not confuse regulator roles, firm permission with individual competence, suitability with appropriateness, FOS with FSCS or an official element weight with an internal topic allocation.
Assuming every breach has the same notification recipient and deadline.
Guardrail: Do not confuse regulator roles, firm permission with individual competence, suitability with appropriateness, FOS with FSCS or an official element weight with an internal topic allocation.
Memory anchors
Data controller
The person determining the purposes and means of processing personal data.
Data subject
The identified or identifiable individual to whom personal data relates.
Personal-data breach
A security breach leading to accidental or unlawful destruction, loss, alteration, disclosure of or access to personal data.
Checkpoint rule
Do the check-up only after you can summarize each concept in one sentence and identify one dangerous pitfall from memory.
Knowledge Check (after reading)
Short check-up to confirm understanding of this module.
Check-up Questions
An onboarding form asks for medical history unrelated to the service. Which principle is threatened?
What does the accuracy principle require?
Answer all questions to submit.
Next step personalized recommendations
Continue learning
Move forward only after this module is stable.
What is Pass Harbor?
Completely free exam prep for 247 UK exams.
- Practice questions
- Flashcards
- Study guides
- Mock exams
- No registration
- No paywall
- Start instantly
“No more expensive exam prep. Quality study tools should be accessible to everyone.”