I have an assignment

MO1	Developed a sound knowledge and appreciation of key aspects of data protection law and understand how it is affected by the UK, European and global contexts in which it operates	
MO2	Critically assess the principles, practicalities and ethical issues involved in Data Protection/Freedom of Information
MO3	Critically and effectively apply key data and information governance, compliance and risk management principles and practice
MO4	Design artefacts to meet the legal, regulatory, organisational and/or societal requirements for data and information governance









Completing your assessment 
What am I required to do on this assessment?
You will be given a fictitious case study (Mars Logistics) that will provide you with all the background information that you will need for successful completion of the four tasks in your portfolio assessment. The case study can be found in the Assessment folder in the programme module on Blackboard.

Task 1 – Briefing note on a historical data and information breach – 10% 
You are required to write a briefing note of no longer than 500 words on a historical data and/or information incident to provide as an example for the CEO of Mars Logistics company (the Case Study) of what can go wrong! Research will be needed to provide, in your briefing note, the name of the organisation that you have researched, the type of activity/work the organisation engages with, the nature of the data/information breach incident, and the implications/repercussions that arose from the incident. 

You should summarise the stated steps that the organisation took to recover from the incident. The briefing note must include a critical evaluation of the principles, practicalities and ethical issues associated with the identified incident that we will have covered in class. Bulleted text will be appropriate in places. 

You must provide evidence of your research by providing a list of consulted references at the end of the briefing note. Please note that the reference list is excluded from the word count. The list must be organised in alpha-chronological order and follow the UWE Bristol Harvard referencing system.

Task 2 – Advice Letter – 20% 
The Mars Logistics company has asked you as, an information and data management consultant, to advise on how their data and information practices can be compliant with relevant current legislation and regulations that we will cover in class. You are tasked to write an advice letter. The letter must include: 
Identification of the issues and concerns that arise from the current operation of the business, as directed by current relevant legislation, policy and practice; 
For two of your identified issues and concerns, state how they contravene relevant legislation and offer recent examples of where similar conflicts have been penalised. 
The letter must be no longer than 500 words and written in a formal manner addressing the client. The issues and recommendations can be presented in a bulleted format. 
Task 3 – Client Pitch – 35% 
Following receipt of your letter Mars Logistics has asked you to provide them with a set of principles that can ensure that the company is in line with current legislation, together with a suggested list of recommended priorities to ensure that these principles can be successfully applied. Collectively these priorities should enable Mars Logistics to operate their business in a way that complies with relevant legislation, policy, and practice. It is accepted that one of these priorities will be related to the collection, storage, and processing of personal data. 

You are required to present this through a video recorded client pitch. The recording must be five minutes long and accompanied by no more than five slides. The tone of the presentation must be up-beat and enthusiastically explain why the policy is necessary and how you will be the best person to oversee its implementation.

Task 4 – Policy implementation plan – 35% 
As noted above an identified priority relates to the collection, storage, and processing of personal data. You have been asked to design an implementation plan that develops a series of policies and actions in response to this priority, to help deliver a more systematic, relevant, and law-abiding process of gathering, processing, and storing data. One of these actions must include the production of a customer feedback form. The form should be produced using Microsoft Forms and must meet relevant legal, regulatory, organisational and/or societal requirements for data and information governance. The implementation plan must include an indication of who should lead on certain actions and offer insight about the timescales over which the actions must take place. The plan should not be longer than 1500 words and must include the data collection form as an appendix.


ASSESSMENT CASE STUDY
Mars Logistics is a family-run company based in Movington, England. With business of over 5 years, the company operates regionally with conventional and abnormal load capabilities. It has a fleet of over 30 vehicles. The company specialises in the movement of valuable high-end electronics and automobile parts in secured vehicles.

Following a period of rapid expansion, Mars Logistics now has three regional bases. Two of these locations were the previous home to two smaller companies that Mars Logistics acquired in the last 3 years. The whole company has just over 100 employees, with about 20 of these having office roles across the three bases. Staff turnover is high and there is a little synergy between the three bases with each traditionally using their own storage and logistics-mapping software. Each base has its own storage facilities, allowing high-value goods to be stored for either short or long periods of time. 

Recruitment practices are basic, with no formal vetting of new recruits or training beyond direct instructions concerning the vehicles. Drivers are supplied with company mobile phones; the company policy is that drivers shouldn’t access social media on the company phones and shouldn’t use their own phones for work.

Investment in IT has traditionally been outcompeted by investment in vehicles. Furthermore, there is recognition that the company has a lack of specialist skills in IT, networking, and data security, with these responsibilities having fallen to one of the director’s son as he ‘likes computers’. However, he has no formal qualifications and has admitted to staff that he feels a bit left behind, particularly on cyber security issues, despite having completed a few cyber-security related courses.

The company has recently invested in developing a delivery tracking system, which tracks vehicle movements and holds information on the goods being transported and the details of the driver making the journey. The tracking system links with the broader HR system of Mars Logistics and allows for driver performance to be analysed, via monthly reports to management.

The company, in line with the broader sector, consistently struggles to attract and retain driving staff. To help reverse this, the company has developed a scheme that recognizes and awards drivers for their customer service through the ‘Best Driver Award’. This award is customer-led, with awards being given to the driver who receives the most commendations each month. To provide this commendation, customers need to complete an online feedback form through which they provide details concerning their name, address, date of birth, email, and phone number.

Recently, staff across the company have reported an increase in spam mail, and these messages have become more frequent. The senders seem to possess specific knowledge about the company, customers, loads and delivery schedules. However, there have been no ‘ransom’ demands or thefts of pallets, so the staff think this is just bad luck caused by someone in the company clicking on a dodgy link.
However, the company’s CEO is concerned that a data breach may have taken place. The CEO has been advised to employ a Data Governance Consultant to conduct a Data Impact Assessment. The consultant will need to assist the company with adequate implementation of data governance policy so to ensure that the company is compliant with relevant data protection regulations.


Below are my Tasks i, 2 and 4.

Now, i want you to generate the Microsoft form for me thebest way you can.