Pertanyaan:
- What are the core principles of GDPR (e.g., data minimization, purpose limitation)?
- What is “personal data” or “Personally Identifiable Information (PII)”? Provide five examples.
- How can a digital business ensure it gets proper consent from users before collecting their data?
Jawaban dibuat sesuai dengan 4 Standarisasi iDu yang terdiri dari Pertanyaan, Status, Keterangan, Bukti (berupa link iMe BisDi)
Status: 100% telah tercapai
keterangan : Saya telah mengerjakan tugas dengan baik dan benar
Bukti:
1. The core principles of GDPR ensure that personal data is handled responsibly and legally. These principles include lawfulness, fairness, and transparency, meaning personal data must be processed in a legal and clear manner so individuals understand how their data is used. Purpose limitation requires data to be collected only for specific and legitimate purposes and not used beyond what was agreed. Data minimization means organizations should collect only data that is relevant and necessary. Accuracy ensures that personal data is kept correct and updated, and inaccurate data must be corrected or removed promptly. Storage limitation states that data should only be stored for as long as needed for processing purposes. Integrity and confidentiality require organizations to protect data from unauthorized access, loss, or damage through proper security measures. Finally, accountability means data controllers are responsible for complying with these principles and must be able to demonstrate their compliance.
2. Personally Identifiable Information (PII) refers to any information related to an identifiable individual that can be used to recognize or trace their identity. Examples include a person’s full name, email address, phone number, government identification number, and financial account information. PII can be categorized into sensitive PII, such as biometric data or financial details that could cause serious harm if leaked, and non-sensitive PII, such as name, date of birth, or general location information.
3.To ensure proper consent before collecting user data, a digital business must clearly inform users about what data is collected, why it is needed, and how it will be used. Consent should be given through an explicit opt-in process, allowing users to freely agree or decline data collection. Companies should provide detailed consent options for different purposes, such as analytics, marketing, or third-party sharing, and allow users to easily withdraw or modify their consent at any time. Organizations must also maintain accurate records of when and how consent was obtained, regularly review permissions, notify users if policies change, and delete or anonymize data when consent expires or is withdrawn.