Data Protection quiz

Who is responsible for Information Governance compliance?

The Chief Executive

The Caldicott Guardian

The Data Protection Officer

Everyone

Which of the following is considered confidential information?

A patient's name

A patient's ethnicity

A patient's health information

All of these

You bump into a friend in a supermarket. You are caring for their neighbour and they ask about their diagnosis. What should you do?

Provide them with basic information, making sure you are not overheard

Inform them that you cannot discuss patient information

Tell them that you will text them later rather than discuss in public

Write the information on a piece of paper

Within what timeframe are organisations required to report serious data breaches to the information commissioner’s office (ICO)?

24 hours

72 hours

1 week

2 weeks

Which of the following should you NOT do if you receive a request for personal information?

Give out the data without making any checks

Verify the individual's ID

Confirm with a manager or the Data Protection Officer if you are unsure if you can give out the data

Confirm the reason for request

What should you do if you need to leave your computer unattended for just two minutes?

Nothing as there are only a few of you in the office

Close the applications that you had open

Lock the computer

Put a post-it-note on desk so that no one uses your computer

Where would you put unwanted papers containing confidential information?

In the bin next to your desk

In the recycling bin

Take them home to dispose of

Shred them in the office

You find a patient's/colleague's file in an empty meeting room, what should you do?

Leave it there, as you are sure someone will collect it soon but complete an incident form.

Leave it in the room and go back to your office to inform your manager.

Pick it up and read the information inside, then shred the documents.

Pick it up and take it to the appropriate department/manager and complete an incident form

You receive an email that looks suspicious, what should you do?

Reply to the email asking for proof of identification

Add the email to ‘junk’ straight away and report to IT

Forward the email to a colleague to check

Call the number they have provided at the bottom of the email to double check if it is a legitimate email

Which of the following is NOT classed as special category data? Personal data revealing:

Religious beliefs

Sexual orientation

Home address

Political opinions