A company stores sensitive customer data. Discuss two ethical considerations the company should take into account regarding this data.

Mark scheme

Marking points from the official mark scheme. The mark or mark type is shown in brackets.

1. Consideration 1: Data privacy / confidentiality (B1).
2. Discussion: Ensuring data is only accessible to authorised personnel / not shared with third parties without consent / using encryption (B1).
3. Consideration 2: Data security (B1).
4. Discussion: Protecting data from breaches / unauthorised access / cyber-attacks / using strong passwords / firewalls (B1).
5. Consideration 3: Data accuracy / integrity (B1).
6. Discussion: Ensuring data is correct and up-to-date / mechanisms to prevent errors (B1).
7. Consideration 4: Data retention (B1).
8. Discussion: Storing data only for as long as necessary / safe disposal when no longer needed (B1).
9. Consideration 5: Consent (B1).
10. Discussion: Obtaining explicit permission from customers before collecting and processing their data (B1).
11. Max 4 marks.