A2 CofC Privacy and Data Protection

Question 1

Under the UK GDPR, what is considered personal data in the context of drone operations?

Accepted Answer

Any information that can identify a living individual, including images, video, vehicle registration plates, and location data

Answer

Only the names and addresses of people filmed

Answer

Only data stored in written documents

Answer

Personal data does not apply to drone footage

Question 2

Who is the data controller when a commercial drone operator collects personal data during a survey flight commissioned by a client?

Accepted Answer

Both the client and the drone operator may be joint controllers or have a controller-processor relationship depending on the arrangement

Answer

The drone pilot only

Answer

The client who commissioned the survey

Answer

The Information Commissioner's Office (ICO)

Question 3

What is the lawful basis most commonly relied upon by drone operators for incidental capture of personal data during legitimate operations?

Accepted Answer

Legitimate interests, balanced against the rights and freedoms of data subjects

Answer

Consent from every individual filmed

Answer

A contract with each data subject

Answer

Vital interests of the data subjects

Question 4

What rights do members of the public have if they are captured in drone footage under UK GDPR?

Accepted Answer

They have the right to access, erasure, and objection to processing of their personal data

Answer

They have no rights regarding drone footage

Answer

They can only complain to the police

Answer

They must pay a fee to exercise any data rights

Question 5

Under what circumstances is a Data Protection Impact Assessment (DPIA) required for drone operations?

Accepted Answer

When the processing is likely to result in a high risk to individuals' rights and freedoms, such as systematic surveillance of public areas

Answer

A DPIA is never required for drone operations

Answer

Only when flying over government buildings

Answer

Only for drones weighing over 25 kg

Question 6

What should a drone operator do to comply with the transparency principle of UK GDPR when flying in a public area?

Accepted Answer

Where practicable, provide notice of the drone operation, such as signs in the area, and have a privacy policy available explaining how personal data will be handled

Answer

Nothing, as filming in public requires no notification

Answer

Shout warnings to people in the area

Answer

Only fly when no one is present