U4A2 P5 P6 M2
Unit 4 assignment 2
City College Plymouth keeps lots of different business information, most of which is obtained
by enrolment forms filled out by students. This information includes:
● Names
● Addresses
● National insurance numbers
● Pictures of students and employees
● Phone numbers
Because the College has this information, they have to comply with obligations and
regulations.
Data Protection Act 2018
This act aims to modernise data protection laws and protect information kept by a business
form being misused. The regulations state that information should be:
● Information obtained fairly & lawfully
An example of this, is that the age of consent for collecting data is 13 therefore if someone was
under 13 when the college was collecting their data, they must make sure to have their parents
consent to this.
● Used for the purpose stated during the collection
For example, the college would not be allowed to sell on your information to other companies
because this would be using the information on students in a way other than stated when
collected.
● Accurate & up to date
The college has to make sure to keep information up to date, so must update addresses if
students move or phone numbers if they change.
● Not kept for longer than necessary
The college has to keep information such as coursework and results for up to 5 years, however
after this they may dispose of it so they are not keeping it for longer than necessary.
● Processed inline with your rights
When filling in things such as enrollment forms, the college must state why they are collecting
this information and what they will do with it, this is to ensure it is processed inline with your
rights and using the information for any other reason would be misuse.
● Subject to procedures to prevent unlawful processing, accidental loss, destruction and
damage
The college keeps all of its information digitally, so it must make sure to backup computer
systems to ensure the information collected won't be easily lost if something happened to the
computers.
● Protected from transfer to area outside the EU unless protection to the same standard is
put in place.
The college does not have operations outside of the EU, therefore this regulation does not
apply to them. However, a business such as vodafone where they may have call centres
Unit 4 assignment 2
City College Plymouth keeps lots of different business information, most of which is obtained
by enrolment forms filled out by students. This information includes:
● Names
● Addresses
● National insurance numbers
● Pictures of students and employees
● Phone numbers
Because the College has this information, they have to comply with obligations and
regulations.
Data Protection Act 2018
This act aims to modernise data protection laws and protect information kept by a business
form being misused. The regulations state that information should be:
● Information obtained fairly & lawfully
An example of this, is that the age of consent for collecting data is 13 therefore if someone was
under 13 when the college was collecting their data, they must make sure to have their parents
consent to this.
● Used for the purpose stated during the collection
For example, the college would not be allowed to sell on your information to other companies
because this would be using the information on students in a way other than stated when
collected.
● Accurate & up to date
The college has to make sure to keep information up to date, so must update addresses if
students move or phone numbers if they change.
● Not kept for longer than necessary
The college has to keep information such as coursework and results for up to 5 years, however
after this they may dispose of it so they are not keeping it for longer than necessary.
● Processed inline with your rights
When filling in things such as enrollment forms, the college must state why they are collecting
this information and what they will do with it, this is to ensure it is processed inline with your
rights and using the information for any other reason would be misuse.
● Subject to procedures to prevent unlawful processing, accidental loss, destruction and
damage
The college keeps all of its information digitally, so it must make sure to backup computer
systems to ensure the information collected won't be easily lost if something happened to the
computers.
● Protected from transfer to area outside the EU unless protection to the same standard is
put in place.
The college does not have operations outside of the EU, therefore this regulation does not
apply to them. However, a business such as vodafone where they may have call centres
