Personal data for the purposes of Data Protection legislation includes personal data held on computers, in manual paper files, and on USB sticks. Which statements are true?

• A. I only.
• B. II only.
• C. I and III only.
• D. I, II and III.

Answer: (D)

Data Protection legislation applies to personal data no matter where it is stored or how it is stored. Personal data is information about a living person that can identify them, directly or indirectly, and this includes digital files, paper records, and portable media.

In this scenario, personal data can be stored on computers, in manual paper files, and on USB sticks. Each of these is a valid storage form, so all three ways of holding personal data are included. Therefore the statement that covers all of them is the correct one.

Remember that protective measures must be applied across every form: secure digital systems, careful handling and filing of paper records, and appropriate security for portable media like USB sticks (encryption, access controls, and proper disposal).