Software Engineering › Key terms › Y12 Secure Software Architecture › General Data Protection Regulation (GDPR)
General Data Protection Regulation (GDPR)
Term Key terms bank Check Y12 Secure Software Architecture
Also listed as: GDPR
Definition
The European Union law on collecting and protecting personal data; it applies to any organisation handling EU residents' data.
Example: An Australian site with EU customers must follow GDPR.
Check this one: The syllabus says regulatory compliance without naming laws; GDPR comes from the school notes.
EU General Data Protection Regulation.
Where it is used in the test
Syllabus area: Y12 Secure Software Architecture.
Question types it can appear in
- Multiple choice: Pick the option that matches the definition or example.
- Short answer: Define, outline or explain it and tie it to the scenario.
- Extended response: Use it as a supporting point linked to the stimulus.
Where it has appeared in the paper
Secure Software Architecture (Part A). Part letters follow each paper’s own layout.
Related past questions
- 2025 HSC Q10 (1 mark): Regulatory compliance Secure Software Architecture (Part A) · 1 mark
These are the questions the flashcard set links to this term. Open each one and compare your answer with its marking criteria.
Study links
- Flashcard: General Data Protection Regulation (GDPR) in Secure Software Architecture (Year 12) · study that set
- Memorise: Describe the benefits of developing secure software
- Key terms bank entry: GDPR
- Notes: Regulatory compliance and legal issues (Secure Software Architecture (Year 12))
- Notes: Evaluate the social, ethical and legal issues and ramifications that affect people and… (Secure Software Architecture (Year 12))
- Notes: Skeleton: Assess/Discuss social, ethical and legal issues of secure software (5-6 marks) (Secure Software Architecture (Year 12))
- Notes: Interpret and apply fundamental software development steps to develop secure code,… (Secure Software Architecture (Year 12))
How to use it in an answer
A model sentence
“The European Union law on collecting and protecting personal data; it applies to any organisation handling EU residents' data.” Then apply it: An Australian site with EU customers must follow GDPR.
In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.
Command words used with it
- Identify: Recognise and name. (2025 HSC Q10 (1 mark): Regulatory compliance)
Technique for the question types
- Multiple choice: Read all four options, rule out wrong ones, pick one; no penalty for guessing so never leave blank.
- Short answer: One clear point per mark, use the stimulus and course terms, and answer the command word.
- Extended response: Plan with the command word, give a judgement or explanation supported by named details from the stimulus, use course terms and cover both sides when asked.
Worked answers from the marking guidelines
2025 HSC Q10 (1 mark): Regulatory compliance (1 mark): criteria and sample answer
Criteria
1: Identifies ALL the items that are the goals of regulatory compliance.
Sample answer
Protecting sensitive data from unauthorised access; Ensuring software applications meet legal and industry standards.
Common mistakes
- Check the sources: The syllabus says regulatory compliance without naming laws; GDPR comes from the school notes.
- Use the term exactly as the syllabus words it, then link it to the scenario in the question; the 2025 feedback repeatedly rewards using the stimulus.
- Answer the command word: outline gives main points only, explain gives a reason or cause, discuss gives both sides.
Related terms
Same group in the syllabus: Benefits of collaboration (secure development) · Benefits to an enterprise of secure development · Social, ethical and legal issues · Employment (impact) · Copyright · Intellectual property · Digital disruption · Programmed backup · Software development steps for secure code (order) · SQL injection