Data Privacy

Data Privacy

Learning Outcomes:

Discuss the importance of data privacy and develop proper attitudes to be an ethical user of database to respect data privacy.

Ways to achieve data privacy in database applications using access rights should be discussed.

Relevant past paper:

DSE ICT Elec A(SP-2016): SP 4ab. PP 4b. 2012 2eii. 2013 2c, 4di. 2015 4d. 2016 2e.

Data Protection Principles

1. Data collected should be necessary and adequate but not excessive.
2. Ensure the personal data is accurate and not kept longer than necessary.
3. Prohibit use of personal data for new purpose not related to original purpose.
4. Take all practical steps to protect the personal data.
5. Take all practical steps to ensure openness of personal data policies and practices.
6. Provide data subjects with the right to request access to and correction of their own personal data.

 Ways to achieve data privacy in database applications - Access control

• Use of login and password
• Access rights to database objects according to user groups
• Create views for different user groups - only provide the necessary information

References:

https://www.pcpd.org.hk/english/data_privacy_law/ordinance_at_a_Glance/ordinance.html

https://www.pcpd.org.hk/english/data_privacy_law/6_data_protection_principles/principles.html