What is the primary purpose of GDPR/UK GDPR in financial services?

What is the primary purpose of GDPR/UK GDPR in financial services?

• A. To improve customer service standards.
• B. To protect individuals' personal data by setting rules on collection, use, storage, consent, security, and individuals' rights.
• C. To regulate competition between banks.
• D. To standardize data taxes.

Answer: (B)

GDPR/UK GDPR is about protecting individuals’ personal data and setting strict rules for how that data is collected, used, stored, and shared, including consent, security measures, and the rights of data subjects. In financial services, this matters a lot because customer data often includes highly sensitive information like account details, transaction histories, and financial identifiers. The rules require a lawful basis for processing, clear privacy notices, data minimization, accuracy, retention limits, and robust security. They also give people rights such as access to their data, correction, deletion, restriction, data portability, and objection, and they expect organisations to be accountable—documenting processing, conducting risk assessments for high-risk activities, and reporting data breaches promptly. After Brexit, the UK applies these principles under the UK GDPR with enforcement by the ICO, and penalties for breaches can be substantial. This focus on privacy and data protection is why the option describing protection of personal data with rules on collection, use, storage, consent, security, and individuals’ rights is the best choice, rather than aims like improving customer service, regulating competition, or standardizing taxes.

GDPR/UK GDPR is about protecting individuals’ personal data and setting strict rules for how that data is collected, used, stored, and shared, including consent, security measures, and the rights of data subjects. In financial services, this matters a lot because customer data often includes highly sensitive information like account details, transaction histories, and financial identifiers. The rules require a lawful basis for processing, clear privacy notices, data minimization, accuracy, retention limits, and robust security. They also give people rights such as access to their data, correction, deletion, restriction, data portability, and objection, and they expect organisations to be accountable—documenting processing, conducting risk assessments for high-risk activities, and reporting data breaches promptly. After Brexit, the UK applies these principles under the UK GDPR with enforcement by the ICO, and penalties for breaches can be substantial. This focus on privacy and data protection is why the option describing protection of personal data with rules on collection, use, storage, consent, security, and individuals’ rights is the best choice, rather than aims like improving customer service, regulating competition, or standardizing taxes.