S4 ICT: Data Privacy And Intellectual Property (Paper 3 (challenge))

S4 ICT: Data Privacy and Intellectual Property (Paper 3 (challenge))

2026-11-14

Tutor Prep Guide · the six data protection principles of the Personal Data (Privacy) Ordinance, the forty-day limit for data access requests, consent for direct marketing, copyright for life plus fifty years, a twenty-year standard patent, registered designs up to twenty-five years, ten-year trade mark terms, fair dealing and open source licences

S4 ICT: Data Privacy and Intellectual Property (Paper 3 (challenge))

Paper 3 (challenge): ten questions on data privacy and intellectual property, with answers and notes.

Direct answers　Level: S4 ICT; format: the six data protection principles, data access requests, copyright and patent terms, design and trade mark renewal, licensing.

01　Paper details (check answers afterwards)

Item	Detail
Questions	10
Suggested time	20
Difficulty mix	Foundation 3 · Intermediate 3 · Challenge 3 · Error redo 1
Chapter	Chapter: S4 ICT: Data Privacy and Intellectual Property
Level	S4

02　Questions (10 items)

FoundationAn author dies in 1995, so copyright ends in 2045. Counting from 2026, how many years remain?
FoundationA trade mark is first registered in 2000 and renewed three times. If it stays in force, to which year does the latest term run?
FoundationA design is registered in 2010 and every renewal is used. To which year can protection last at most?
IntermediateA breach involves 500 records, 60% of which contain identity card numbers. How many records is that?
IntermediateIf each of those 300 affected people receives 500 dollars, what is the total compensation?
IntermediateOnly 12% of 2000 users have two-factor authentication enabled. How many have not?
ChallengeBackups run three times a day and are kept for 30 days. How many can exist at once?
ChallengeEight staff share one system account. What is the most serious compliance problem when something goes wrong?
ChallengeA form says personal data may be used for any purpose in future. Which principle is breached?
Error redoA student claims staff records inside a company are outside the privacy Ordinance. What is wrong?

03　Answers and one-line notes

#	Answer	One-line note
1	19 years	2045 minus 2026 is 19, so the work enters the public domain in 19 years.
2	2040	One registration plus three renewals is four terms of 10 years, so 2000 plus 40 gives 2040.
3	2035	2010 plus 25 gives 2035; after that the design is free for anyone to use.
4	300	500 times 0.6 is 300; identity card numbers are the highest-risk item in such a breach.
5	$150,000	300 times 500 is $150,000, before any regulatory penalty or reputational cost.
6	1760 users	2000 times 0.12 is 240 enabled, and 2000 minus 240 leaves 1760 without it, that is 88% relying on a password alone.
7	90	Three times 30 gives %d; longer retention costs more storage and key management but shortens the recovery point.
8	Operations cannot be traced to a person, so accountability fails	A shared account makes every audit entry point to one identity, which breaches accountability in data security and makes responsibility impossible to establish.
9	DPP1: the purpose must be lawful and directly related to the functions of the user	The purpose must be specific at the point of collection; a vague any-purpose wording is effectively no purpose, and later use will also struggle to satisfy DPP3.
10	Wrong: employees are data subjects too, and all six principles bind the employer	From recruitment, attendance and medical records to retention after leaving, the employer is a data user and may use the data only for employment-related purposes.

04　What to do after marking

After marking, redo only the wrong items and write down which step went wrong (formula, unit, or misread number).
Repeat the same item two days later; move to the next paper only when both attempts are correct.
Parents only need the answer and note columns; there is no need to explain every item.

First ask whether the data can identify a living individual, then walk the six principles from collection to deletion; for intellectual property always give both the term and its starting point, filing date for patents and year of death for copyright.Tutor Registration →

Questions and answers are written originally by the TutorZone team and are not taken from any school, publisher or examination authority paper. Every value is checked by computer.