The spreadsheet in the wrong inbox
Imran works on a shop's sales sheet. It has 2,000 loyalty card members: names, home areas and what each one bought. He emails it to the wrong "Sam" by mistake.
Nobody meant any harm. But a stranger now holds the list. Is it a problem for the shop? The law says yes.
Key words
| Word | What it means | Example |
|---|---|---|
| Personal data | information about a living person who can be named or found | a name, an address, a loyalty card number |
| Data subject | the person the data is about | |
| GDPR | the General Data Protection Regulation, the rules on personal data | |
| Data controller | the organisation that decides how personal data is used | |
| Principle | a main rule that other rules follow from | |
| Breach | when personal data is lost, stolen or seen by the wrong people | |
| ICO | the Information Commissioner's Office, the UK body that checks the law is followed | |
| Anonymised | changed so that nobody can be named or found from it |
The cells students fill in are left blank in this preview.
By the end of this lesson
Note
I can explain what data protection law is for and name its main principles. I can say how it affects people who analyse data.
Starter: last lesson
Have a go
Starter: last lesson
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
The law protects people, not companies
In the UK, two laws work together: the UK GDPR and the Data Protection Act 2018. Their purpose is to protect personal data and the rights of the data subject.
A company may use your data. But it must be fair, careful and honest about it. You can ask to see your data, to correct it, and in some cases to have it deleted.
Who does what
| Who | What they do | Example |
|---|---|---|
| Data subject | Owns the rights over the data about them | A loyalty card member on the sales sheet |
| Data controller | Decides why and how the data is used and must follow the law | The shop that keeps the sheet |
| ICO | Checks the law is followed, gives advice and can fine | Told within 72 hours of a serious breach |
The cells students fill in are left blank in this preview.
Check
Have a go
Check
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.