Data Management Flashcards
What is the GDPR 2018 and how does your business comply with them?
A Strong set of Data Protection Rules. Synergy have a Privacy Notice, which they require staff to sign confirming that their personal data can be stored in accordance with the GDPR 2018. They advise staff of their rights under the regulations as well as refer to the principles. Synergy store client details on SIMS – Recording of information.
What is the Data Protection Act 2018?
Controls how your personal information is used by organisations, businesses and the Government. Everyone using personal data must follow strict rules called data protection principles.
(1. Lawfulness Fairness & Transparency 2. Purpose limitation 3.Data minimisation 4. Accuracy 5. Storage limitation 6.Integrity and 7. Confidentiality 8. Accountability).
Who do you file complaints with in relation to GDPR?
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.
How does Synergy store data?
Synergy store data on the individuals in the business. They also have a client list, where they anonymously state their interest to detail their interests for marketing purposes and business relations. Our emails are automatically deleted after three years if not precisely stored in the Information Management System. Synergy also use ISO 9001 which sets requirements on how firms should control data relevant to the service they provide.
What is the difference between sensitive data and data?
Sensitive data would include personal data includes information about racial or ethnic origin, political opinions, religious beliefs, membership of trade unions, genetic and biometric data, health information and data around a person’s sex life or orientation and data is email address, home address, phone number.
What are the Principles under GDPR?
(LFPDASIA) Lawfulness, Fairness and Transparency, Purpose Limitation. Data minimisation, Accuracy, Storage limitation, Integrity and confidentiality Accountability
What is the Freedom of Information Act and how would you advise your Client to use it?
Schools have a lot of information that is held by the Local Authority and the Freedom of Information Act allows people the right to the information that is stored and the holding authority have 20 days to respond. The only information that can be refused is the information held by Federal Law.
What are your rights under GDPR?
Under the Data Protection Act 2018, you have the right to find out what information is being stored about you. BAREROAD - The right to Be informed, the right of Access, the right to Rectification, the right to Erasure, the right to Restrict processing, the right to Data portability, the right to Object and also rights around Automated decision making and profiling. It is free to request however, some companies may charge and admin fee.
When can information be withheld?
The prevention, detection, investigation of a crime, national security or the armed forces, the assessment or collection of tax, judicial or ministerial appointments.
What are your individual Rights under GDPR?
BAREROAD – Rights to:
- Be informed
- Access
- Restrictions
- Erasure
- Rectification
- Object
- Automated Decision Making
- Data portability.
What’s the difference with sensitive data and data? Give examples?
Sensitive data is extremely confidential information about the persons interests and political beliefs. Data is how a person is identified and could include address, name, and contact details.
What are the GDPR regulations?
General Data Protection Regulations. The Data Protection Act 2018 controls how your personal information is used by organisations, businesses or the government.
What fines can be given for not adhering to GDPR?
The UK GDPR and DPA 2018 says that smaller offences - up to €10 million or two per cent of a firm’s global turnover (whichever is greater). The biggest GDPR breaches - Up to €20 million or four per cent of a firm’s global turnover (whichever is greater). This could mean a fine of up to £17.5 million, or 4% of your total worldwide annual turnover, whichever is higher.
What can constitute to a fine under the GDPR 2018 Act?
If an organisation does not process an individual’s data in the correct way. If it requires and does not have a data protection officer If there’s a security breach.
What web tools do you use to manage data?
Will be based on personal experiences, this could be Dropbox. At synergy we use SIMS. It should provide each member of the project organisation access to view all relevant project documents. It should be secure and ensure privacy and protection of data.
