CIPP/E Chapter 15: Surveillance Activities correctly answered rated A+

CIPP/E Chapter 15: Surveillance Activities What does communications data refer to? - correct answers It may refer to traditional surveillance, such as interception of postal services and the use of human spies or surveillance devices. However, these types of surveillance are receding in favor of more modern and high-tech surveillance of telecommunications, including Internet activity. What are the two main categories of personal data that are generated by electronic communications? - correct answers The content of a communication and metadata What is metadata? - correct answers Data about data What is traffic data? - correct answers Data that includes information about the type, format, time, duration, origin and destination, routing, protocol used, and the originating and terminating network of a communication. True or false: in relation to a telephone call, traffic data includes the calling and called numbers. - correct answers True. True or false: in relation to an email, traffic data includes sender and recipient email addresses and the size of attachments. - correct answers True. What is location data? - correct answers The latitude, longitude and altitude of the user's equipment, the direction of travel, the level of accuracy of the location information, the identification of the network cell ('Cell ID') in which the user device is located at a certain time, and the time the location information was recorded. What is subscriber data? - correct answers The name, contact details and payment information When does a data protection impact assessment (DPIA) need to be filled out with regard to video surveillance? - correct answers A DPIA will have to be completed if: the video surveillance is considered to be high risk, it involves the systematic monitoring of a publicly accessible area on a large scale or if video surveillance has been included by the relevant supervisory authority on a list of data processing operations that require a DPIA. In regards to video surveillance, a DPIA will need to describe: - correct answers 1. The processing to be carried out 2. The purposes of processing 3. The legitimate interests pursued by the data controller 4. An assessment of why it is necessary and proportionate in relation to the purposes 5. An assessment of the risks to the rights and freedoms of the data subjects impacted by the surveillance 6. The measures required to address the risks, protect the personal data and demonstrate compliance with the Regulation, taking into account the rights and legitimate interests of data subjects and other persons concerned What is biometric data? - correct answers Defined in Article 4(14) of the Regulation as personal data resulting from specific technical processing relating to the physical, physiological or behavioral characteristics of a natural person, which allow or confirm the unique identification of that natural person, such as facial images or dactyloscopic data. Examples include: DNA, fingerprints, palms, vein patterns, retina and iris patterns, odor, voice, face, handwriting keystroke technique and gait. What are the two main uses of biometric systems today? - correct answers Identification and authentication True or false: for biometric data to be included as a special category of personal data under Article 9 of the GDPR, the purpose for which the biometric data is being processed must be for uniquely identifying a natural person. - correct answers True. True or false: if the biometric data is being used to permit access to a location as a part of a large group of identifiers, then Article 9 will apply. - correct answers False. Article 9 will not apply, all though it needs to be remembered that biometric data is, by definition, personal data. What are Location-Based Services? - correct answers LBS utilizes information about location to deliver, in various contexts, a wide array of applications and services, including social networking and gaming, entertainment, advertising and marketing, information, navigation, commerce, payment, tracking goods and people, security and emergency response services.