Week 11: Social Issues of the Information Age

A legal framework designed to protect personal data and individuals' privacy. It establishes rules for collecting, storing, using, and disclosing personal information.

The right to live a private life without unnecessary government interference.

Three key aspects of privacy: freedom from intrusion, control of personal information, and freedom from surveillance.

The practice of collecting, storing, and using personal information for commercial purposes.

The process of combining data from multiple databases to create a more complete profile of an individual.

A country or region with weak or no legal protections for data privacy, making it appealing for organizations seeking to store or process data without stringent regulations.

A set of rules for protecting personal data within the European Union (EU), emphasizing data subjects' rights and imposing stricter regulations on data processing.

Responses or actions intended to deceive or mislead individuals about the true purpose or extent of data collection or usage.

The period for which a customer subscribes to a service after their initial subscription term has ended.

The legal agreements between a service provider and a user outlining the rules and responsibilities for using the service.

A written statement that details how a company collects, uses, and protects personal information.

The initial period for which you subscribe to a Zoom service, as specified in your order.

The date when your initial subscription to a Zoom service officially begins.

Any company that is directly or indirectly controlled by Zoom, or that controls Zoom.

A person who hosts or participates in a Zoom meeting, using the Zoom service.

The minimum requirements for your device, internet connection, and software to effectively use Zoom.

The legal agreement outlining the terms and conditions for using Zoom services.

A document that lists the different Zoom services offered.

Additional terms and conditions that apply to a specific Zoom service you choose.

The legal basis for processing personal data must be one of these six grounds, ensuring data handling complies with GDPR regulations.

This principle requires organizations to be transparent about how they use individuals' personal data, informing them clearly about their data processing practices.

This principle emphasizes the importance of treating individuals fairly and respecting their rights in relation to their personal data.

This principle ensures that personal data is handled lawfully, in line with GDPR regulations and specific authorized purposes.

In the context of GDPR, this refers to the individual's agreement to allow the processing of their personal data for a specific purpose. It must be explicit, informed and freely given.

This lawful basis applies when processing personal data is necessary for fulfilling a contract between an individual and an organization.

This lawful basis allows processing personal data when required by law to comply with a legal obligation placed on the organization.

This lawful basis applies when processing personal data is necessary to protect the vital interests of an individual or another person.

The GDPR principle stating that data should be collected only for specific and legitimate purposes. This means that organizations must have a clear reason for collecting data and must not use it for other purposes.

This GDPR principle ensures that personal data is kept accurate and updated where necessary. Organizations must take steps to ensure that the data they hold is correct and reflects the current situation.

The GDPR principle dictating that data should be stored only as long as necessary. It means that organisations should not store personal data indefinitely, but only for as long as it is required for the original purpose.

The GDPR principle requiring that personal data collected must be adequate, relevant, and limited to what is necessary for the specified purpose. It means organizations should collect only the data that is essential.

This principle of the GDPR mandates that personal data should be processed in a way that ensures security. This involves safe storage techniques and implementing suitable measures to prevent unauthorized access, disclosure, alteration, or destruction of personal data.

WindTre was fined € 17 million by the Italian data protection authority for violating the GDPR principle of "purpose limitation." The company was found to have collected user consent for various purposes, including marketing, profiling, and sharing data with third parties, without providing explicit and separate consent for each purpose.

Ensuring data is processed securely to maintain its integrity and confidentiality. This includes implementing measures to protect against unauthorized access, use, disclosure, alteration, or destruction.

A fundamental principle of data protection that emphasizes the responsibility of organizations to demonstrate they are complying with data protection principles. This includes establishing clear processes and accountability mechanisms.

A right under GDPR allowing individuals to request the deletion of their personal data if specific conditions are met, such as when the data is no longer necessary for the original purpose.

A requirement for organizations to provide individuals with clear and concise information about how their personal data will be processed.

A right under GDPR allowing individuals to request that their data be processed only under specific conditions or purposes.

A right under GDPR allowing individuals to access their personal data held by an organization.

A right under GDPR allowing individuals to receive a copy of their personal data in a structured, commonly used, and machine-readable format, facilitating data transfer between services.

A right under GDPR allowing individuals to request the correction of inaccurate or incomplete personal data held by an organization.