An agent wants to give customers' personal data to another company so it can promote its products. Without the customers' prescribed consent, this would breach:
Answer: Principle 3, on use of personal data. Unless the data subject consents, data should only be used for the collection purpose or a directly related purpose; disclosing data to other companies for their promotions is a typical breach.Why not the others:• Principle 2, on accuracy and retention: accuracy is not in question.• Principle 6, on access to personal data: access rights are not involved.• Principle 1, on purpose and manner of collection: the data was collected lawfully; the issue is later use.Watch out: Picking the collection principle for a use problem.Rule: New purposes need prescribed consent; direct marketing also follows Part 6A.Source: IA P1 Study Notes 2024 Ed. §7.2.1(c)(iii), p.7/4
Picking the collection principle for a use problem.
Practise more IIQE Paper 1 Ethical and Other Related Issues questions
Exam-style questions with worked answers, then full timed mocks. Free to start.
Build a daily practice habit — a few exam-style questions a day, with worked answers. Free to start.
Start practising →Original study material written to the public IIQE Paper 1 syllabus. Independent, not endorsed by the Insurance Authority or the VTC. Verify figures and rules against current guidance before relying on them.