Indicative content
Answers may include reference to the following reasons
- To respect data subjects' rights
- people have the right to know what personal data is collected and how it will be used
- people can give or refuse consent and data should be used only for the stated purpose
- people can ask to see or correct their data
- To prevent harm to individuals
- avoid loss, unauthorised access or sharing of names, email addresses and identifiable video clips
- avoid distress, embarrassment or invasion of privacy
- inaccurate personal information can damage a person's reputation
- To protect the organisation
- maintain trust and reputation
- avoid complaints or legal problems
- To store data only as long as needed
- delete records when they are no longer needed to reduce the risk of misuse
Award credit for any other appropriate response
Award a maximum of two distinct reasons; do not credit the same reason twice. Do not credit overlapping points such as 'tell people what is collected' and 'get consent' as two reasons unless they are explained separately.
A sound explanation gives a reason or consequence for the individual or the organisation, e.g. 'so members can decide whether to take part' or 'so footage is not shared and causes distress'.
Accept 'privacy' only where it is linked to personal data.
Do not accept: 'be careful with data', or a named responsibility with no reason given. Do not accept answers about copyright, music licences or property releases.
Levels
- Level 3 (5–6 marks): A thorough explanation which shows detailed understanding: Two reasons are identified – and two explanations attempted; Shows detailed knowledge and understanding of data protection; Reasons are clearly explained; Consistently uses appropriate terminology.
- Level 2 (3–4 marks): An adequate explanation which shows sound understanding: Two reasons are identified – at least one explanation attempted; Shows sound knowledge and/or understanding of data protection; Reasons are adequately explained; Sometimes uses appropriate terminology.
- Level 1 (1–2 marks): A brief explanation which shows limited understanding: At least one reason is identified – at least one explanation is attempted; Shows limited knowledge and/or understanding of data protection; Reason is explained in a basic way; Use of appropriate terminology is limited.
- 0 marks: Response is not worthy of credit