Data Management Flashcards
What are some Data Security Technologies?
- Disk encryption
- Regular back ups off-site
- Password protection
- Use of anti-virus software
- Firewalls and disaster recovery procedures
What should you consider about the source of your data?
- Reliability of the Source
- Risk of the source
Where possible verify the data against and alternative source
What is copyright?
A set of exclusive rights granted to the author or creator of any original work, including the right to copy
What is the Data Protection Act 2018?
- Data Protection Act is the UK’s implementation of GDPR, it also covers general data as covered by the 1998 Act
What is the aim of the Data Protection Act 2018/ GDPR?
Aims to create a single data protection regime for anyone doing business in the EU and to empower individuals to take control of how their data is use by 3rd parties
What does GDPR stand for?
General Data Protection Regulation
What are some key requirements under GDPR?
Obligation to conduct data protection impact assessment
New rights for individuals to have access to information on their personal data and have it erased
A data controller decides how and why personal data is processed and is directly responsible for GDPR
Data Security breaches need to be reported to the ICO within 72hrs where there is a loss of personal data and a risk of harm to individuals
What are the penalties for failure to comply with GDPR?
Fines up to 4% of global turnover or EUR 20 million whichever is greater
What is Article 5 (1)?
Relates to the storage of personal data
What are some key principles of Article 5 (1) in GDPR?
Processed lawfully, fairly and in a transparent manner
Collected for specified, explicit and legitimate purposes and not further processed for other manners
Kept in a form which permits identification of data subjects for no longer than necessary
What are Individual rights under GDPR?
Right to be Informed Right of Access Right to Rectification Right to Erasure Right to restrict Processing Right to Data Processing Right to Object Right to Automated decision making and profiling
What is the Freedom of Information Act 2000?
Gives individuals the right of access to information held by public bodies
What are some exemptions from the Freedom of Information Act 2000?
- If it is contrary to GDPR
- It would prejudice an ongoing criminal investigation
- It would prejudice a person/organisations commercial interest
How can security of electrical data be improved?
Using firewalls, encryption and passwords
What is the proposed RICS professional statement on Data Handling and prevention of Cyber Crime?
Proposed to address how surveyors capture, store and share data appropriately and securely and is likely to mandate policies, practices and training for all regulated firms and members