What is the role of data protection in charity operations?

• A. Data protection is optional for charities.
• B. It is only about cybersecurity systems, not personal data.
• C. Charities must protect donor and beneficiary data, comply with GDPR/UK GDPR and privacy laws.
• D. It is unrelated to fundraising activities.

Answer: (C)

Data protection in charity operations is about handling personal information responsibly and legally, covering donors, beneficiaries, staff, and volunteers. It means putting in place safeguards for privacy and ensuring data is processed in ways that are fair, transparent, and secure.

This is why the best answer emphasizes protecting donor and beneficiary data and complying with GDPR/UK GDPR and privacy laws. Charities must have a lawful reason to process data, explain what they’re doing with it, collect only what’s needed, protect it with appropriate security, and respect individuals’ rights (like access, correction, and deletion). It also involves governance steps such as data mapping, clear policies, data retention rules, and breach response procedures.

If you rely on the other views, you’d miss essential obligations: data protection isn’t optional, nor is it only about cybersecurity systems; and it matters for fundraising because donor trust hinges on how well a charity safeguards personal information.