Correct Principles:
Also valid: Data minimisation, Storage limitation, Integrity & confidentiality (Security).
(a) Religion, Ethnicity, Politics, Biometrics, Genetics, Sexual orientation. (Reject: Password/Bank details - common mistake).
(b) Data breach causes significant harm/distress (discrimination/health) (1). Legally requires stronger protection due to risk (1).
Explanation (2): Data kept no longer than necessary (1). Delete when member leaves (1).
Step (1): Regular review of data / Automatic deletion policy.
(a) Integrity and Confidentiality (Security).
(b) Fines (ICO) (2). Reputation loss/Parents lose trust (2). Compensation claims (2).
Data was collected for weather purposes (1). Selling for ads is a different purpose without consent (1).
Level 3 (6-8): Detailed discussion of both areas.
Level 2 (3-5): Discusses both reasonably well.
Level 1 (1-2): Basic points.