{"language":"en_GB","topic":{"id":"p181081i20","strTitle":"Topic 7: Data protection","screens":[{"id":"p181081i20s01","strTitle":"Welcome","objNormalBackgroundSrc":{"strSrc":"95039\/95040\/generic_bg_03.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p181081i20s01a01","layoutId":null,"strContent":"Data protection","strTextAlign":"left-align","active":1},{"id":"p181081i20s01a02","layoutId":null,"strContent":"The General Data Protection Regulation (GDPR) is a regulation on information privacy in the EU and the European Economic Area. In UK law, it has been implemented as the UK GDPR, which sits alongside the Data Protection Act 2018 (DPA). Both aim to control how personal data – anything that can be used to identify individuals, directly or indirectly – is collected, stored and used.\n \nIn this topic, we will look at an issue relating to protecting data as you give your colleague, Kamal, your advice. Then, we will explore some key things you need to know.\n \nThis topic will take approximately eight minutes to complete.","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i20s01a03","layoutId":null,"strContent":"Select Start to continue.","strTextAlign":"left-align","active":1},{"id":"p181081i20s01a04","layoutId":null,"objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s01a04.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i20s01a05","layoutId":"p181081i20s01lay01","objNormalSrc":{"strSrc":"95039\/95040\/ucisa_logo_retina.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i20s01a07","layoutId":"p181081i20s01lay01","strLabel":"Start","strAlignment":"left-align","objIconImageFilename":{"strSrc":""},"active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p181081i20s02","strTitle":"Email mistake!","objNormalBackgroundSrc":{"strSrc":"95039\/95040\/generic_bg_04.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p181081i20s02a01","layoutId":null,"strContent":"Select your answer, then Confirm.","strTextAlign":"left-align","active":1},{"id":"p181081i20s02a02","layoutId":null,"strContent":"Kamal is working on a project collating information about students on a particular course. He has assembled information in a spreadsheet that includes their email addresses and dates of birth.\n \nIt's been a long day, and he sends a couple of quick emails before going home. One of them is to an email list he is on for another piece of work. He sends the email and, just as he presses send, he realises that he has accidentally attached the spreadsheet from the other project! He asks for your advice.","strTextAlign":"left-align","active":1},{"id":"p181081i20s02a03","layoutId":null,"strContent":"Email mistake!","strTextAlign":"left-align","active":1},{"id":"p181081i20s02a04","layoutId":null,"objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s02.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i20s02a05","layoutId":null,"strContent":"Select the next button to continue.","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i20s02a08","layoutId":null,"arrOptions":[{"strOptionText":"Use an email recall feature (if available), as this will prevent the message from being delivered.","arrOptionFeedbackActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i20s02sub02","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strOptionText":"It was only one spreadsheet; there is no need to do anything.","arrOptionFeedbackActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i20s02sub03","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strOptionText":"You know someone in IT, so you recommend asking them if they can delete the messages.","arrOptionFeedbackActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i20s02sub04","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strOptionText":"Kamal should report this to the Data Protection Office and his manager ASAP.","arrOptionFeedbackActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i20s02sub01","booAssetOwnedSubscreen":false},"strObjectType":"action"}]}],"arrFirstIncorrectActions":[{"strActionType":"createSubScreenFromText","strActionGroup":"preprocess","subscreenUuid":"8071050b-8c8f-4566-8577-679d904ff17c","objParameters":{"strTextToCreateSubScreenID":"","booAssetOwnedSubscreen":false},"strObjectType":"action"}],"active":1},{"id":"p181081i20s02a09","layoutId":"p181081i20s02lay01","strContent":"What should Kamal do?","strTextAlign":"left-align","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p181081i20s02sub01","strTitle":"Correct","assets":[{"id":"p181081i20s02sub01a01","layoutId":null,"strContent":"[b]That's right![\/b]\n\nThis may be a reportable incident under the Data Protection Act, and the institution may have a legal obligation to report the matter to the Information Commissioner's Office under a strict timeframe. Kamal's manager should also be made aware of the situation, as they can help with any actions advised by the Data Protection Office.\n \nRecall features are generally unreliable, and the IT team will be unable to stop people from receiving the email with the attachment.","strTextAlign":"left-align","active":1},{"id":"p181081i20s02sub01a02","layoutId":null,"strContent":"Select Next to continue.","strTextAlign":"left-align","active":1},{"id":"p181081i20s02sub01a03","layoutId":null,"objNormalSrc":{"strSrc":"95039\/95040\/feed_correct_icon.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i20s02sub01a04","layoutId":"p181081i20s02sub01lay01","strLabel":"Next","strAlignment":"left-align","objIconImageFilename":{"strSrc":""},"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i20s02sub02","strTitle":"Incorrect 1","assets":[{"id":"p181081i20s02sub02a01","layoutId":null,"strContent":"[b]That's not quite right...[\/b]\n\nWhile the recall function may help recover some messages, it is generally not sufficient to stop an email from being delivered to most users.","strTextAlign":"left-align","active":1},{"id":"p181081i20s02sub02a03","layoutId":null,"objNormalSrc":{"strSrc":"95039\/95040\/feed_incorrect_icon.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i20s02sub02a04","layoutId":"p181081i20s02sub02lay01","strLabel":"Continue","strAlignment":"left-align","objIconImageFilename":{"strSrc":""},"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i20s02sub03","strTitle":"Incorrect 2","assets":[{"id":"p181081i20s02sub03a01","layoutId":null,"objNormalSrc":{"strSrc":"95039\/95040\/feed_incorrect_icon.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i20s02sub03a02","layoutId":null,"strContent":"[b]That's not quite right... [\/b]\n\nThe spreadsheet contained the personal data of many students. This is therefore classified as a data breach and cannot be ignored; it must be reported.","strTextAlign":"left-align","active":1},{"id":"p181081i20s02sub03a04","layoutId":"p181081i20s02sub03lay01","strLabel":"Continue","strAlignment":"left-align","objIconImageFilename":{"strSrc":""},"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i20s02sub04","strTitle":"Incorrect 3","assets":[{"id":"p181081i20s02sub04a01","layoutId":"p181081i20s02sub04lay00","objNormalSrc":{"strSrc":"95039\/95040\/feed_incorrect_icon.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i20s02sub04a02","layoutId":"p181081i20s02sub04lay00","strContent":"[b]That's not quite right... [\/b]\n \nWhile the IT team may be able to perform some clean-up, it is unlikely they will be able to prevent the message being received and read by all recipients as messages travel through the internet to external systems at great speed. ","strTextAlign":"left-align","active":1},{"id":"p181081i20s02sub04a04","layoutId":"p181081i20s02sub04lay00","strLabel":"Continue","strAlignment":"left-align","objIconImageFilename":{"strSrc":""},"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p181081i20s03","strTitle":"Key takeaways","objNormalBackgroundSrc":{"strSrc":"95039\/95041\/generic_bg_02.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p181081i20s03a01","layoutId":null,"strContent":"Key takeaways","strTextAlign":"left-align","active":1},{"id":"p181081i20s03a02","layoutId":null,"strContent":"Let's examine the key takeaways from this topic.\n\nEveryone has a role to play in keeping our data safe:\n[list]\n[*]Keep personal data safe, especially special category data.\n[*]Share personal data appropriately – use 'need-to-know' groups.\n[*]It's important to report incidents as this will help us minimise any harm and prevent major breaches happening in the future. There will be no blame for submitting a report, more so they are an opportunity for identifying areas of improvement for the individual(s) and the organisation.\n[*]Understand the risks to personal data.\n[*]Keep up to date on the types of threat, as criminals change their techniques.\n[*]Protect information, both physically (on paper) and virtually (online).\n[\/list]\n","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i20s03a03","layoutId":null,"strContent":"Select the next button to continue.","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i20s03a04","layoutId":null,"objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s03a04.png","strAltText":""},"strImageAlignment":"left","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p181081i20s04","strTitle":"Knowledge check","objNormalBackgroundSrc":{"strSrc":"95039\/95040\/generic_bg_05.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p181081i20s04a01","layoutId":null,"strContent":"Which of the following statements about data protection are correct?","strTextAlign":"centre-align","active":1},{"id":"p181081i20s04a02","layoutId":null,"arrOptions":[{"strOptionText":"Data breaches of personal information must be reported as soon as possible."},{"strOptionText":"Personal data is anything that can be used to identify a living individual, such as name, date of birth, or address."},{"strOptionText":"There are nine principles of data protection."},{"strOptionText":"You must have a lawful basis for processing personal data."},{"strOptionText":"You must justify the length of time you're keeping each piece of personal data you store."},{"strOptionText":"You don't need to check with your institution's Data Protection Office to collect, store and process data that relates to a person's ethnicity, gender identity, and\/or religion."},{"strOptionText":"Under the data protection Accountability principle, the data subject is accountable for everything that happens to their data."}],"arrCorrectActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i20s04sub01","booAssetOwnedSubscreen":false},"strObjectType":"action"}],"arrFinalIncorrectActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i20s04sub02","booAssetOwnedSubscreen":false},"strObjectType":"action"}],"arrFirstIncorrectActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i20s04sub02","booAssetOwnedSubscreen":false},"strObjectType":"action"}],"active":1},{"id":"p181081i20s04a03","layoutId":null,"strContent":"Select the correct answers, then Confirm.","strTextAlign":"centre-align","active":1},{"id":"p181081i20s04a04","layoutId":null,"strContent":"Knowledge check","strTextAlign":"centre-align","active":1},{"id":"p181081i20s04a05","layoutId":null,"strContent":"Select the next button to continue.","strTextAlign":"centre-align","customTitle":false,"active":1},{"id":"p181081i20s04a06","layoutId":"p181081i20s04lay02","objNormalSrc":{"strSrc":"95039\/95041\/knowledge_check.png","strAltText":""},"strImageAlignment":"center","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p181081i20s04sub01","strTitle":"Correct","assets":[{"id":"p181081i20s04sub01a01","layoutId":null,"strContent":"[b]That's right!\n [\/b]\nThe correct statements are:\n[list]\n[*]Data breaches of personal information must be reported as soon as possible.\n[*]Personal data is anything that can be used to identify a living individual, such as name, age, or address.\n[*]You must have a lawful basis for processing personal data.\n[*]You must justify the length of time you're keeping each piece of personal data you store.\n[\/list]\nThere are seven principles of data protection, and you need to check with your institution's Data Protection Office to collect, store and process data that relates to a person's ethnicity, gender identity, and\/or religion. Under the data protection Accountability principle, the data subject is not accountable for everything that happens to their data.","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i20s04sub01a02","layoutId":null,"objNormalSrc":{"strSrc":"95039\/95040\/feed_correct_icon.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i20s04sub01a03","layoutId":null,"strLabel":"Continue","strAlignment":"left-align","objIconImageFilename":{"strSrc":""},"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i20s04sub02","strTitle":"Incorrect","assets":[{"id":"p181081i20s04sub02a01","layoutId":null,"strContent":"[b]That's not quite right...[\/b]\n[b] [\/b]\nThe correct statements are:\n[list]\n[*]Data breaches of personal information must be reported as soon as possible.\n[*]Personal data is anything that can be used to identify a living individual, such as name, age, or address.\n[*]You must have a lawful basis for processing personal data.\n[*]You must justify the length of time you're keeping each piece of personal data you store.\n[\/list]\nThere are seven principles of data protection, and you need to check with your institution's Data Protection Office to collect, store and process data that relates to a person's ethnicity, gender identity, and\/or religion. Under the data protection Accountability principle, the data subject is not accountable for everything that happens to their data.","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i20s04sub02a02","layoutId":null,"objNormalSrc":{"strSrc":"95039\/95040\/feed_incorrect_icon.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i20s04sub02a03","layoutId":null,"strLabel":"Try again","strAlignment":"left-align","objIconImageFilename":{"strSrc":""},"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i20s04sub03","strTitle":"Well done!","assets":[{"id":"p181081i20s04sub03a01","layoutId":null,"strContent":"​Well done!","strTextAlign":"left-align","active":1},{"id":"p181081i20s04sub03a02","layoutId":null,"strContent":"Congratulations, you have now completed this topic. Please feel free to revisit any part of this topic before you go.","strTextAlign":"left-align","active":1},{"id":"p181081i20s04sub03a04","layoutId":"p181081i20s04sub03lay01","objNormalSrc":{"strSrc":"95039\/95041\/topic_complete_sub.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i20s04sub03a05","layoutId":"p181081i20s04sub03lay01","strLabel":"Continue","strAlignment":"left-align","objIconImageFilename":{"strSrc":""},"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p181081i20s05","strTitle":"Protecting data","objNormalBackgroundSrc":{"strSrc":"95039\/95040\/generic_bg_03.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p181081i20s05a01","layoutId":null,"strContent":"Protecting data","strTextAlign":"left-align","active":1},{"id":"p181081i20s05a02","layoutId":null,"strContent":"Institutions hold large volumes of staff and student personal data, as well as research data which could be exploited if it gets into the wrong hands. Robust technical and organisational measures are therefore essential to protecting any information related to teaching, research, or business operations.\n \nBreaches should be reported to your Data Protection Office as soon as possible after you become aware of them. For significant breaches, it is a legal requirement that the institution reports them within 72 hours to the Information Commissioner's Office.","strTextAlign":"left-align","active":1},{"id":"p181081i20s05a04","layoutId":null,"objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s05a04.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i20s05a05","layoutId":"p181081i20s05lay01","strContent":"Select the next button to learn more.","strTextAlign":"left-align","customTitle":false,"active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p181081i20s06","strTitle":"The seven principles of data protection","objNormalBackgroundSrc":{"strSrc":"95039\/95040\/generic_bg_06.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p181081i20s06a01","layoutId":null,"strContent":"Select each icon to learn more.","strTextAlign":"centre-align","active":1},{"id":"p181081i20s06a02","layoutId":null,"strContent":"It's essential to follow DPA\/GDPR guidelines when collecting, storing, processing, or managing personal data.","strTextAlign":"centre-align","active":1},{"id":"p181081i20s06a03","layoutId":null,"strContent":"The seven principles of data protection","strTextAlign":"centre-align","active":1},{"id":"p181081i20s06a04","layoutId":null,"strAlignment":"centre-alignC","objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s06_01_n.png","strAltText":""},"objActiveSrc":{"strSrc":"95039\/95041\/p181081i20s06_01_h.png"},"objVisitedSrc":{"strSrc":"95039\/95041\/p181081i20s06_01_v.png"},"arrHotspots":[{"strText":"Lawfulness, fairness, transparency","objCoords":{"intTop":"0","intLeft":"0","intWidth":"200","intHeight":"236"}}],"active":1},{"id":"p181081i20s06a05","layoutId":null,"strAlignment":"centre-alignC","objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s06_02_n.png","strAltText":""},"objActiveSrc":{"strSrc":"95039\/95041\/p181081i20s06_02_h.png"},"objVisitedSrc":{"strSrc":"95039\/95041\/p181081i20s06_02_v.png"},"arrHotspots":[{"strText":"Purpose limitation","objCoords":{"intTop":"0","intLeft":"0","intWidth":"200","intHeight":"236"}}],"active":1},{"id":"p181081i20s06a06","layoutId":null,"strContent":"Select the other icon.","strTextAlign":"centre-align","active":1},{"id":"p181081i20s06a07","layoutId":null,"strContent":"Select the next button to continue.","strTextAlign":"centre-align","customTitle":false,"active":1},{"id":"p181081i20s06a08","layoutId":"p181081i20s06lay02","strAlignment":"centre-alignC","objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s06_03_n.png","strAltText":""},"objActiveSrc":{"strSrc":"95039\/95041\/p181081i20s06_03_h.png"},"objVisitedSrc":{"strSrc":"95039\/95041\/p181081i20s06_03_v.png"},"arrHotspots":[{"strText":"Data minimalisation","objCoords":{"intTop":0,"intLeft":0,"intWidth":200,"intHeight":236}}],"active":1},{"id":"p181081i20s06a09","layoutId":"p181081i20s06lay03","strAlignment":"centre-alignC","objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s06_04_n.png","strAltText":""},"objActiveSrc":{"strSrc":"95039\/95041\/p181081i20s06_04_h.png"},"objVisitedSrc":{"strSrc":"95039\/95041\/p181081i20s06_04_v.png"},"arrHotspots":[{"strText":"Accuracy","objCoords":{"intTop":0,"intLeft":0,"intWidth":200,"intHeight":236}}],"active":1},{"id":"p181081i20s06a10","layoutId":"p181081i20s06lay03","strAlignment":"centre-alignC","objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s06_05_n.png","strAltText":""},"objActiveSrc":{"strSrc":"95039\/95041\/p181081i20s06_05_h.png"},"objVisitedSrc":{"strSrc":"95039\/95041\/p181081i20s06_05_v.png"},"arrHotspots":[{"strText":"Storage limitation","objCoords":{"intTop":0,"intLeft":0,"intWidth":200,"intHeight":236}}],"active":1},{"id":"p181081i20s06a11","layoutId":"p181081i20s06lay04","strAlignment":"centre-alignC","objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s06_07_n.png","strAltText":""},"objActiveSrc":{"strSrc":"95039\/95041\/p181081i20s06_07_h.png"},"objVisitedSrc":{"strSrc":"95039\/95041\/p181081i20s06_07_v.png"},"arrHotspots":[{"strText":"Accountability","objCoords":{"intTop":0,"intLeft":0,"intWidth":200,"intHeight":236}}],"active":1},{"id":"p181081i20s06a12","layoutId":"p181081i20s06lay04","strAlignment":"centre-alignC","objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s06_06_n.png","strAltText":""},"objActiveSrc":{"strSrc":"95039\/95041\/p181081i20s06_06_h.png"},"objVisitedSrc":{"strSrc":"95039\/95041\/p181081i20s06_06_v.png"},"arrHotspots":[{"strText":"Integrity and confidentiality\/security","objCoords":{"intTop":0,"intLeft":0,"intWidth":200,"intHeight":236}}],"active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p181081i20s06sub01","strTitle":"Lawfulness, fairness, transparency","assets":[{"id":"p181081i20s06sub01a01","layoutId":null,"strContent":"[b]Lawfulness [\/b]means that when processing personal data, you should have a good reason for doing so.\n \nThis is known as having a [b]'lawful basis'[\/b] for processing personal data: in other words, the reason you are doing it is permitted under data protection law. In the UK, there are six lawful bases: [b]consent, contract, legal obligation, vital interests, public task [\/b]and [b]legitimate interests[\/b]. Contact your Data Protection team for advice on establishing the appropriate lawful basis for processing.\n \n[b]Fairness [\/b]means you won't mishandle or misuse the data you collect.\n \n[b]Transparency[\/b] means being clear, open, and honest with data subjects about who you are, and why and how you're processing their personal data. You shouldn't purposefully withhold information about why or how you're collecting personal data.","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i20s06sub01a04","layoutId":null,"strContent":"Lawfulness, fairness, transparency","strTextAlign":"left-align","active":1},{"id":"p181081i20s06sub01a05","layoutId":"p181081i20s06sub01lay01","objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s06_01_sub.png","strAltText":""},"strImageAlignment":"left","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i20s06sub02","strTitle":"Purpose limitation","assets":[{"id":"p181081i20s06sub02a01","layoutId":null,"strContent":"This principle means that data collected should only be used for the purpose for which it was collected. If, at any point, you want to use the data you've collected for a new purpose that's incompatible with your original purpose, you must ask for consent to use that data again.","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i20s06sub02a04","layoutId":null,"strContent":"Purpose limitation","strTextAlign":"left-align","active":1},{"id":"p181081i20s06sub02a05","layoutId":"p181081i20s06sub02lay01","objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s06_02_sub.png","strAltText":""},"strImageAlignment":"left","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i20s06sub03","strTitle":"Data minimisation","assets":[{"id":"p181081i20s06sub03a01","layoutId":"p181081i20s06sub03lay00","strContent":"Data minimisation","strTextAlign":"left-align","active":1},{"id":"p181081i20s06sub03a02","layoutId":"p181081i20s06sub03lay00","strContent":"You should only collect the minimum amount of data you'll need to satisfy your purpose.","strTextAlign":"left-align","active":1},{"id":"p181081i20s06sub03a05","layoutId":"p181081i20s06sub03lay00","objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s06_03_sub.png","strAltText":""},"strImageAlignment":"left","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i20s06sub04","strTitle":"Accuracy","assets":[{"id":"p181081i20s06sub04a01","layoutId":"p181081i20s06sub04lay00","strContent":"Accuracy","strTextAlign":"left-align","active":1},{"id":"p181081i20s06sub04a02","layoutId":"p181081i20s06sub04lay00","strContent":"You should ensure the accuracy of the data you collect and store. Set up checks and balances to correct, update, or erase incorrect or incomplete data that comes in.","strTextAlign":"left-align","active":1},{"id":"p181081i20s06sub04a05","layoutId":"p181081i20s06sub04lay00","objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s06_04_sub.png","strAltText":""},"strImageAlignment":"left","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i20s06sub05","strTitle":"Storage limitation","assets":[{"id":"p181081i20s06sub05a01","layoutId":"p181081i20s06sub05lay00","strContent":"Storage limitation","strTextAlign":"left-align","active":1},{"id":"p181081i20s06sub05a02","layoutId":"p181081i20s06sub05lay00","strContent":"You must justify the length of time you're keeping each piece of personal data you store. You should set a standard time period after which you'll anonymise, archive, or delete any data you're not actively using.","strTextAlign":"left-align","active":1},{"id":"p181081i20s06sub05a05","layoutId":"p181081i20s06sub05lay00","objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s06_05_sub.png","strAltText":""},"strImageAlignment":"left","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i20s06sub06","strTitle":"Integrity and confidentiality\/security","assets":[{"id":"p181081i20s06sub06a01","layoutId":"p181081i20s06sub06lay00","strContent":"Integrity and confidentiality\/security","strTextAlign":"left-align","active":1},{"id":"p181081i20s06sub06a02","layoutId":"p181081i20s06sub06lay00","strContent":"You must maintain the integrity and confidentiality of the data you collect, keeping it secure from internal or external threats.","strTextAlign":"left-align","active":1},{"id":"p181081i20s06sub06a05","layoutId":"p181081i20s06sub06lay00","objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s06_06_sub.png","strAltText":""},"strImageAlignment":"left","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i20s06sub07","strTitle":"Accountability","assets":[{"id":"p181081i20s06sub07a01","layoutId":"p181081i20s06sub07lay00","strContent":"Accountability","strTextAlign":"left-align","active":1},{"id":"p181081i20s06sub07a02","layoutId":"p181081i20s06sub07lay00","strContent":"You must have appropriate measures and records in place as proof of your compliance with the data-processing principles. Your institution's Data Protection Office (DPO) will be able to advise you on this.","strTextAlign":"left-align","active":1},{"id":"p181081i20s06sub07a05","layoutId":"p181081i20s06sub07lay00","objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s06_07_sub.png","strAltText":""},"strImageAlignment":"left","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p181081i20s07","strTitle":"Special categories of data","objNormalBackgroundSrc":{"strSrc":"95039\/95040\/generic_bg_03.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p181081i20s07a01","layoutId":"p181081i20s07lay01","strContent":"Special categories of data","strTextAlign":"left-align","active":1},{"id":"p181081i20s07a02","layoutId":"p181081i20s07lay01","strContent":"Some personal data is more sensitive and needs to be handled particularly carefully; this is called special category data.\n \nThis includes data about:\n[list]\n[*]Race and ethnicity.\n[*]Health (medical conditions, disabilities, etc.).\n[*]Sexual orientation and\/or gender identity.\n[*]Religious and\/or philosophical beliefs.\n[*]Political affiliation.\n[*]Trade union membership.\n[\/list]\nCheck with your institution's Data Protection Office if you believe you will be collecting, handling, or processing data that falls into one of these special categories, as it requires both a lawful basis and a particular set of conditions for processing.","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i20s07a03","layoutId":"p181081i20s07lay01","strContent":"Select the next button to continue.","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i20s07a04","layoutId":"p181081i20s07lay01","objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s07.png","strAltText":""},"strImageAlignment":"left","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p181081i20s08","strTitle":"What is personal data?","objNormalBackgroundSrc":{"strSrc":"95039\/95040\/generic_bg_01.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p181081i20s08a01","layoutId":"p181081i20s08lay00","strContent":"Personal data is anything that can be used to identify a living individual, either directly or indirectly, such as:\n[list]\n[*]ID – name, passport number, online identifier.\n[*]Demographic – age, nationality.\n[*]Location – address, IP address.\n[\/list]\nIf personal data is disclosed to an unauthorised recipient (whether accidentally or on purpose), this is called a personal data breach. A data breach can also involve the destruction, loss, or alteration of, or access to, personal data.","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i20s08a02","layoutId":"p181081i20s08lay00","strContent":"What is personal data?","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i20s08a03","layoutId":"p181081i20s08lay00","strContent":"Select the next button to continue.","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i20s08a04","layoutId":"p181081i20s08lay00","objNormalSrc":{"strSrc":"95039\/95041\/p181081i20s08a04.png","strAltText":""},"strImageAlignment":"left","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1}],"active":true}}