Question
A company wants to share its customers' email addresses with a marketing partner. State two conditions that must be met under DPA 2018 for this sharing to be lawful.
Mark scheme — two of:
- Customers must have given explicit consent to their data being shared with third parties (B1)
- The sharing must be for a purpose customers were informed about at the time of collection (B1)
- The company must have a lawful basis for sharing (consent, contract, legitimate interest, etc.) (B1)
- Data must be used only for the stated marketing purpose, not other uses (B1)
2 marks · take your time before peeking.
Sign up to try the next 30 problems
Save your streak, mark answers against the spec, and build a daily revision habit. Free during public beta — no card, no auto-renew.
Generated by TopMyGrade AI · cross-check official sources before relying on the mark-scheme phrasing.