Consequence of diminished data integrity: legal issues

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. A company keeps a customer's old, incorrect address on file after being told it has changed. Could this be a legal issue?

A Yes, it may breach privacy obligations to keep personal information accurate

B No, data accuracy is never a legal matter

2. Which is a possible legal consequence of an organisation holding inaccurate personal data?

A A bonus payment from the regulator

B A fine or penalty from a regulator

3. A bank acts on wrong credit data and wrongly refuses a customer a loan. What might the customer do?

A Nothing, as customers cannot make claims about data

B Make a legal claim for the harm caused

4. Which statement about legal issues and data integrity is correct?

A Acting on inaccurate data can be a legal problem, not only a business one

B Inaccurate data only causes legal problems if it is stolen

5. Which sub-theme is an example of a legal issue from diminished data integrity?

A Breach of privacy obligations

B A slower internet connection

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1Legal issues from diminished data integrity		Afines and penalties
2Claim by an affected person		Bbreach of privacy obligations
3An organisation keeps out-of-date customer records and breaches its privacy obligation to keep personal information accurate		CKeeping or acting on inaccurate data can breach laws and lead to fines, penalties or legal action.
4A regulator penalises an organisation that acted on inaccurate personal data in breach of the law		DA person harmed by wrong data about them takes legal action to seek compensation.
5Inaccurate data only causes technical problems, never legal ones.		EWrong: inaccurate data can also breach laws, such as privacy obligations, and lead to fines or legal action.
6Only the organisation can take legal action when data is wrong.		FWrong: affected people can also make claims against the organisation if inaccurate data about them causes harm.

Definitions

Legal issues from diminished data integrity

Fill in the Blanks

Complete each line of code by filling in the missing parts.

IF recordAccurate = _____ THEN flagLegalRisk() END IF

IF dataIsWrong ___ hasPersonalInfo THEN privacyBreach ← TRUE END IF

fine ← 0 IF privacyBreach = TRUE ____ fine ← 50000

FOR EACH person __ affectedPeople claimCount ← claimCount + 1 NEXT person

IF dataAccurate THEN legalRisk ← "low" ____ legalRisk ← "high"

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A record = get_record(id)

B if record.accurate == True:

C correct(record)

D log_privacy_risk(record)

Question 2

A fine = 0

B if inaccurate and breach:

C fine = fine - 50000

D print(fine)

Question 3

A claims = 0

B for p in unaffected_people:

C claims += 1

D print(claims)

Question 4

A def check_privacy(record):

B if not record.accurate:

C return 'Compliant'

D return 'Compliant'

Question 5

A if customer_data_wrong:

B risk = 'none'

C notify_legal_team()

Answer Key

Consequence of diminished data integrity: legal issues

Section A: Quick Questions

A — Yes, it may breach privacy obligations to keep personal information accurate

B — A fine or penalty from a regulator

B — Make a legal claim for the harm caused

A — Acting on inaccurate data can be a legal problem, not only a business one

A — Breach of privacy obligations

Section B: Match the Pairs

Legal issues from diminished data integrity → Keeping or acting on inaccurate data can breach laws and lead to fines, penalties or legal action.

Claim by an affected person → A person harmed by wrong data about them takes legal action to seek compensation.

An organisation keeps out-of-date customer records and breaches its privacy obligation to keep personal information accurate → breach of privacy obligations

A regulator penalises an organisation that acted on inaccurate personal data in breach of the law → fines and penalties

Inaccurate data only causes technical problems, never legal ones. → Wrong: inaccurate data can also breach laws, such as privacy obligations, and lead to fines or legal action.

Only the organisation can take legal action when data is wrong. → Wrong: affected people can also make claims against the organisation if inaccurate data about them causes harm.

Section C: Definitions

Legal issues from diminished data integrity — Keeping or acting on inaccurate data can breach laws like privacy obligations, leading to fines, penalties or legal claims by affected people.

Section D: Fill in the Blanks

IF recordAccurate = FALSE THEN
  flagLegalRisk()
END IF

IF dataIsWrong AND hasPersonalInfo THEN
  privacyBreach ← TRUE
END IF

fine ← 0
IF privacyBreach = TRUE THEN
  fine ← 50000

FOR EACH person IN affectedPeople
  claimCount ← claimCount + 1
NEXT person

IF dataAccurate THEN legalRisk ← "low"
ELSE legalRisk ← "high"

Section E: Spot the Error

B — The condition is reversed. Inaccurate data (accurate == False) is what must be corrected and logged as a privacy risk, so the test should be 'record.accurate == False'.

C — A breach caused by inaccurate data adds to the fine, it does not reduce it. The line should be 'fine = fine + 50000'.

B — Legal claims come from people affected by the inaccurate data, not from unaffected people. The loop should go through affected_people.

C — Inaccurate data risks breaching privacy obligations. The line inside the 'if not record.accurate' block should return 'Breach risk', not 'Compliant'.

B — Keeping wrong customer data can lead to legal action or penalties. The risk should be set to 'legal action', not 'none'.