Title: Privacy

Principles of Data Sharing:

• Everyone should have access to the data they need.

• There should be no barriers preventing people from obtaining that data.

• Data should be organized and structured so that anyone can access, understand, and use it easily.

Privacy and security regulations are enforced through standards such as the General Data Protection Regulation (GDPR) in Europe and the California Consumer Privacy Act (CCPA) in the United States. To safeguard personal information, it's important to invest in proper documentation, establish clear data-sharing agreements, implement access controls, and adhere to data minimization practices.

Q: Practical Exercise

REFLECT

Think about everyday situations where data protection might be compromised, and consider why this happens and methods to prevent it.
A: Some common cases are:

Over-sharing on Social Media: Sharing too much personal information on social media platforms, providing potential attackers with details for identity theft or social engineering attacks.

Weak Passwords: Using weak or easily guessable passwords for online accounts, making it easier for hackers to gain unauthorized access.

Publicly Visible Webcam: Forgetting to turn off a webcam after a video call, unknowingly exposing private activities to potential hackers or unauthorized viewers.

Misplaced USB Drive: Misplacing a USB drive containing sensitive work documents, risking unauthorized access to confidential information if found by someone else.

Q: When we give people control over their personal information, What are we talking about?
- Security
- Privacy (correct)
- Data sharing
Feedback (0 to 49%): Try again!
Feedback (50 to 100%): Well done!

Q: When we protect data from unauthorized access, What are we talking about?
- Security (correct)
- Privacy
- Data sharing

Q: Data should be organized and structured so that anyone can access, understand, and use it easily.
- True (correct)
- False
Feedback (0 to 49%): Try again!
Feedback (50 to 100%): Well done!

Security

Security refers to measures taken to protect personal information. Data needs protection against unauthorized access, use, disclosure, disruption, alteration, or destruction.

The principle of integrity is one of the most crucial rules of GDPR, stating that personal data must be safeguarded against unauthorized access, alteration, or destruction.

The more people that have access to the data, the more opportunities there are for unauthorized individuals to access it. To prevent this, two tools are used: access control and data minimization.

Q: Practical Exercise

REFLECT

Take a moment to reflect on occasions when you have shared your personal data and who might be the recipient, such as through social media use or participation in online forums.
A: Access controls ensure that only appropriate individuals have access to the data through access levels or authentication methods.

Data minimization aims to limit the amount of shared data. Rather than sharing everything, it involves analyzing what information is genuinely essential for multiple teams to perform their work.

Q: Privacy consists of having control over what information is shared, with whom, and why.
- True (correct)
- False
Feedback (0 to 49%): Try again!
Feedback (50 to 100%): Well done!

Q: What is the most recognized rule according to the GDPR and CCPA?
- The Identity theft rule
- The purpose limitation rule (correct)
- The anti-spam actions rule

Q: From the following elements, identify the one that contains personal information.
- National Statistics Institute data
- User's phone number (correct)
- Unemployment data
- Information about a medication

Q: What principle of GDPR states that personal data must be safeguarded against unauthorized access, alteration, or destruction?
- Principle of replenishment
- Principle of data minimization
- Principle of integrity (correct)
Feedback (0 to 49%): Try again!
Feedback (50 to 100%): Well done!

Q: The more people have access to the data, the fewer opportunities there are for unauthorized individuals to access it.
- True
- False (correct)

Q: From the following elements, identify those that can be considered access controls for our personal data (multiple answers)
- Access levels (correct)
- Authentication methods (correct)
- Remote security controls
- Disclosure levels
Feedback (0 to 49%): Try again!
Feedback (50 to 100%): Well done!