Uni Dissertation

A simple game where you look through a website's database to find data points that are in violation of GDPR.

Upon starting a level you will be presented with some panels containing information stored on a website's database. Scan the information provided to find if any of the data their holding is illegal under GDPR; some information about the website is at the top screen to help you make your judgement. When you have made your decision press the green button on the right hand side if the website is compliant and the red one if it is not.

The following clauses are implemented.

1. collected for specific, explicit and legitimate purposes + not further processed beyond these
2. kept in a form which permits identification of data subjects
3. not stored for longer than necessary
4. the controller shall be able to demonstrate the subject has consented
5. the data subject has the right to withdraw consent at any time
6. request for consent must be clear and distinct from other permissions
7. if the subject is below 16 years of age the controller must ensure that the user has parental consent
8. the data subject has the right to confirm from the controller whether or not their data is being processed
9. purposes, categories of data, recipients of the processed data
10. how long the data will be stored/the criteria for determining how long
11. the controller shall provide a copy of the data being processed, so long as it does not infringe on the rights and freedoms of others
12. the data subject shall have the right to obtain the rectification of inaccurate personal data
13. data subject has the right to be forgotten
14. unless: it infringes on freedom of information, for the establishment or defence of legal claims
15. archiving in the public interest
16. in the case of a data breach, the controller shall within 72 hours of becoming aware notify the breach to supervisory body, or provide reasons for the delay
17. the controller shall also communicate this breach to the data subjects

Made for a university dissertation.