BMIS – L1 – SA – Q4.3 – The external environment

Data protection laws apply to:

A   any person holding data about individuals

B   any person or business organisation holding personal data about individuals including personal data about customers and employees

C   any person or business organisation holding data about individuals but not including data about customers and employees

D   any person or business organisation holding personal data about individuals but not including personal data about customers and employees

B

Explanation:

The correct answer is B. Data protection laws apply to any person or business organization holding personal data about individuals, including data about customers and employees. This encompasses all entities that process personal data, ensuring compliance with privacy regulations. Options A, C, and D are incorrect because they either exclude key groups (customers and employees) or are too broad, failing to specify personal data.