CH 19: Data Flashcards
Define personal data
1
- Personal data is information that can identify and individual, or where the data combined with other information could allow the individual to be identified
Eight principles which must be followed when processing personal data
POPIA ACT
Personal data must:
1. ACCOUNTABILITY: Party processes data is accountable for compliance
2. PROCESSING LIMITATION: Be processed fairly and lawfully with consent
3. PURPOSE SPECIFICATION: Be obtained and processed for specified purposes
4. SECURITY SAFEGUARDS: Integrity and confidentiality ensured
- FURTHER PROCESS LIMITATION: Must be compatible with initial purpose.
- OPENESS: Transparency on use and documentation available
- DATA QUALITY: Completeness,accuracy updated by holder
- DATA SUBJECTS: request confirmation,correction,deletion
APPS FODD
Competition Legislation
2
- Anti-Competitive Agreements: data shared amongst groups of companies to fix prices
- Abuse of market position: Setting unfair trading terms in monopoly
Examples of what might count as ‘sensitive personal data’
7
Sensitive personal data can include information related to:
- Racial or ethnic origin
- Political opinions
- Religious or other beliefs
- Membership of trade unions
- Physical or mental health or condition
- Sexual life
- Convictions, proceedings and criminal acts
Stricter regulation than other personal data
Give examples of circumstances when sensitive personal information may be legitimately processed
4
- The data subject has given explicit consent
- It is required by law for employment purposes
- It is needed in order to protect the vital interests of the individual or another person
- It is needed in connection with the administration of justice or legal proceedings
State three characteristics of ‘big data’
3
- The data sets are very large
- Data is brought together from different sources
- Data can be analyzed very quickly, for example in real time
Data protection considerations
2,3
- Hold personal data as big data same regulation will apply
- Anonymisation is used to make big data non personal
Big data must:
* Have a clear goal
* All data processed must be relevant
* Transparency in processing +consent
Define ‘data governance’ and list the guidelines that a data governance policy may cover
1,6
- Data governance – the overall management of the availability, usability, security and integrity of data employed in an organization
A data governance policy will set out guidelines with regards to:
- The specific roles and responsibilities of individuals in the organization with regards to data
- How an organization will capture, analyze and process data
- Issues with respect to data security and privacy
- The controls that will be put in place to ensure that the required data standards are applied
- How the adequacy of controls will be monitored on an ongoing basis with respect to data usability, accessibility, integrity and security
- Ensuring that the relevant legal and regulatory requirements in relation to data management are met by the organization
State four risks to a company not having adequate data governance procedures
4
- Legal and regulatory non-compliance
- Inability to rely on data for decision making
- Reputational issues, leading to loss of business
- Incurring additional costs such as fines and legal costs
Data Usage risks
5
- Data errors/omissions
- Data incorrect form
- Insufficient historical data for predictions and analysis
- No data available for certain scenarios
- Historical != Future
Define algorithmic trading
This is a form of automated trading that involves buying and selling financial securities electronically to capitalize on price discrepancies for the same stock or asset in different markets
Explain the risks of algorithmic trading
- Errors in the algorithm or data used to parameterize the model, leading to losses
- The algorithm may not operate properly in adverse conditions
- In very turbulent conditions, trading in individual stocks or markets may be suspended before algorithmic trade can be completed
- Possible impacts on the financial system
How should data be controlled and managed?
3
- There should be one single, integrated data system so that the data used for different applications is consistent
- Reduced chance of corruption/inconsistent treatment
- Better access control over data and changes
- Easier to secure
List the main sources of data
4
Tables
Reinsurers
Abroad (data from overseas contracts)
Industry data
National statistics
Experience investigations on the existing contract
Regulatory reports and company accounts
Similar contracts
- Public
- Internal
- External
- Data collection scheme
TRAINERS
Reasons why industry data is not directly comparable (heterogeneity)
6
- Different geographical and socio-economic markets
- Different policies
- Different sales methods
- Different practices, e.g. underwriting and claims settlement processes
- Different nature of data stored
- Different coding of risk factors