Consent, privacy and fairness
Evaluate whether information use is authorised, necessary and equitable.
What you will learn
- Distinguish access from permission.
- Apply purpose limitation and data minimisation.
- Consider unequal impact and reasonable alternatives.
Having technical access to information does not create permission to use it. Responsible decisions define the purpose, lawful authority, minimum data and people affected before processing begins.
Core method
Having technical access to information does not create permission to use it. Responsible decisions define the purpose, lawful authority, minimum data and people affected before processing begins.
- Define the exact decision or claim before analysing detail.
- Use evidence that is relevant to the stated context.
- Record uncertainty instead of replacing it with confident wording.
Applied case
A student society collected email addresses for event registration and later wants to give the list to a sponsor for recruitment.
Apply the method
Assess the proposal and identify a compliant alternative.
Review answer guidance
The original collection purpose does not automatically cover sponsor recruitment. Do not disclose the list without appropriate notice and valid permission. The society can send an invitation itself and allow students to opt in directly to the sponsor.
Use in an assessment
Apply the method to the information provided in the task. A strong response makes its reasoning traceable and does not rely on specialist facts that are absent from the evidence.
- Read the requested outcome and constraints first.
- Eliminate responses that exceed the available evidence.
- Review whether the conclusion answers the precise question.