Cybersecurity · Advanced level

Advanced level · Module 5: Data Protection, Ethics and Security Culture · Lesson 1 of 4

Data Protection Principles

Handle personal data lawfully, fairly and securely.

In this lesson you will

  • Apply core data protection principles
  • Map personal data flows

Key concepts

purpose limitationdata minimisationsecurity and retentiondata mapping

The lesson

Widely recognised principles: collect personal data for a clear purpose, only as much as needed, keep it accurate and secure, keep it no longer than necessary and respect people's rights.

A data map shows what personal data is held, where, who can access it, who it is shared with and how long it is kept.

Check the specific laws and donor requirements that apply to the organisation; principles guide good practice everywhere.

Step by step

  1. List personal data types.
  2. Record locations and access.
  3. Record sharing and retention.
  4. Identify risks and improvements.

Practice activity

Create the case NGO's personal data map.

Expected result: A data map with risks and improvements.

Check your understanding

  1. What is data minimisation?

    Show answer

    Collecting only the personal data needed for the purpose.

  2. What does a data map show?

    Show answer

    What personal data is held, where, who accesses it, sharing and retention.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.