Discuss BCS PDP9 Exam Topic 7 Question 21

How are data sharing practices governed by data protection law?

AData sharing practices are covered in the DPA 2018, supported by a statutory Code of Practice that provides specific guidance

BData sharing practices are subject to the PECR until the new statutory Code of Practice is published

CData sharing practices are covered by the Freedom of Information Act

DData sharing practices are not specifically regulated, however the ICO provide best practice guidance

Suggested Answer: C

The principle of transparency requires that any processing of personal data is fair, lawful and transparent to the data subjects. This means that data subjects should be informed about the existence, nature, purpose and consequences of the processing, as well as their rights and choices regarding their data. Transparency is essential for ensuring accountability, trust and compliance in data processing. However, the use of AI can pose challenges to the principle of transparency, as AI can lead to invisible processing, with data subjects not being aware of its presence, or the logic, significance and implications of the processing. For example, AI can be used to profile, infer, predict or influence the behaviour, preferences, interests, emotions or personality of data subjects, without their knowledge or consent. AI can also be used to make automated decisions that affect data subjects, such as credit scoring, recruitment, health diagnosis or social benefits, without providing meaningful explanations or opportunities for human intervention.Therefore, it is important to ensure that data subjects are informed and empowered when AI is involved in the processing of their data, and that they can exercise their rights, such as the right to access, rectify, object, restrict, erase or port their data, or the right to challenge or contest automated decisions56.Reference:

Guidance on AI and data protection5

Explaining decisions made with AI6

Get Premium PDP9 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

38 comments · newest first

Danica 11 months ago

Wait, are we sure there's no specific regulation? Sounds fishy.

Danica 11 months ago

C is definitely wrong, FOIA doesn't cover this.

Melita 11 months ago

B seems off, PECR is more about electronic comms.

Frederic 12 months ago

Totally agree, the statutory Code is key!

Louis 12 months ago

A is correct, DPA 2018 covers it.

Gertude 12 months ago

I feel like the ICO's guidance is important, but I thought there had to be more specific regulations in place for data sharing practices.

Cecily 1 year ago

The Freedom of Information Act doesn’t seem right for this question, but I can't recall what it actually covers.

Sonia 1 year ago

I remember something about the PECR being relevant, but I thought it was more about electronic communications than data sharing directly.

Yolando 1 year ago

I think data sharing practices are mainly covered by the DPA 2018, but I'm not entirely sure about the specifics of the Code of Practice.

Katina 1 year ago

Based on my understanding, the answer is D. Data sharing practices aren't directly regulated, but the ICO does provide guidance on best practices. I'll make sure to double-check that in my revision, but that's my initial thought.

Beatriz 1 year ago

I think the key here is that data sharing practices are specifically regulated, so I'm leaning towards either A or B. The Freedom of Information Act doesn't seem relevant to this question.

Celestina 1 year ago

I'm pretty confident that the answer is A - the DPA 2018 covers data sharing practices and there's a statutory Code of Practice that provides specific guidance on this.

Sena 1 year ago

Hmm, I'm a bit unsure about this one. I know the PECR is relevant for some data sharing, but I can't remember if that's the main law that covers it. I'll have to review my notes on this topic.

Dell 1 year ago

I'm pretty confident this is a 51% attack. That's the classic network-based blockchain attack that allows the attacker to control the network.

Leontine 1 year ago

Option A - the one that's 'supported by a statutory Code of Practice' - sounds like it has the most substance. I'm not looking to wing it on this exam!

Evan 1 year ago

Best practice guidance is better than nothing, but I'd prefer a more robust, legally-binding framework to govern data sharing.

Vesta 1 year ago

↳ replying to Evan

Best practice guidance is better than nothing, but I'd prefer a more robust, legally-binding framework to govern data sharing.

Buck 1 year ago

↳ replying to Evan

C) Data sharing practices are covered by the Freedom of Information Act

Dorthy 1 year ago

↳ replying to Evan

B) Data sharing practices are subject to the PECR until the new statutory Code of Practice is published

Dana 1 year ago

↳ replying to Evan

A) Data sharing practices are covered in the DPA 2018, supported by a statutory Code of Practice that provides specific guidance

Stephane 1 year ago

The Freedom of Information Act? That's a completely different set of laws. I don't see how that's relevant to data sharing practices.

Stefan 1 year ago

↳ replying to Stephane

D) Data sharing practices are not specifically regulated, however the ICO provide best practice guidance

Yuette 1 year ago

↳ replying to Stephane

B) Data sharing practices are subject to the PECR until the new statutory Code of Practice is published

Flo 1 year ago

↳ replying to Stephane

A) Data sharing practices are covered in the DPA 2018, supported by a statutory Code of Practice that provides specific guidance

Jacqueline 2 years ago

I'm not sure PECR is the right reference here, as that's more about electronic communications. The DPA 2018 seems to be the primary legislation we need to focus on.

Rex 1 year ago

↳ replying to Jacqueline

D) The ICO's best practice guidance is also important to consider

Rory 1 year ago

↳ replying to Jacqueline

B) I agree, the DPA 2018 is the main legislation governing data sharing practices

Tien 1 year ago

↳ replying to Jacqueline

A) Data sharing practices are covered in the DPA 2018, supported by a statutory Code of Practice that provides specific guidance

Telma 2 years ago

But isn't data sharing also subject to the PECR until the new statutory Code of Practice is published?

Davida 2 years ago

Option A sounds the most comprehensive, covering the relevant data protection law and guidance. The other options seem to be missing key elements.

Selma 1 year ago

↳ replying to Davida

I agree, it's always best to follow the guidance provided by the DPA 2018 and the ICO.

Sharita 1 year ago

↳ replying to Davida

I'm not sure about option C, as the Freedom of Information Act may not cover all aspects of data sharing practices.

Earleen 1 year ago

↳ replying to Davida

I think option D is also important, as the ICO's guidance can be very helpful.

Helaine 1 year ago

↳ replying to Davida

I agree, option A seems to be the most detailed and specific.

Dong 1 year ago

↳ replying to Davida

User 2: I agree, it seems like the most comprehensive option for governing data sharing practices.

Ora 1 year ago

↳ replying to Davida

User 1: I think option A is the best choice, it covers the DPA 2018 and provides specific guidance.

Lonna 2 years ago

I agree with Ashlyn, the DPA 2018 provides specific guidance on data sharing practices.

Ashlyn 2 years ago

I think data sharing practices are covered in the DPA 2018, supported by a statutory Code of Practice.

BCS PDP9 Exam - Topic 7 Question 21 Discussion