Data Management Flashcards
Freedom of Information Act 2000
- Right to information held by public sector.
- Request must be in writing.
- Information must not be exempt e.g. personal or national security.
- Response in 20 days.
What is the General Data Protection Regulation 2016, implemented May 2018
EU regulation that aims to protect consumer data.
UK implemented GDPR through Data Protection Act 2018
When did GDPR come into effect?
May 2018
What is article 5 of GDPR?
Requirements of how personal data is to be handled
What does article 5 of GDPR require?
Personal data shall be:
a) Processed lawfully, fairly and transparently.
b) Collected for specific, explicit and legitimate purpose.
c) Adequate, relevant and limited to necessity.
d) Accurate.
e) Kept in appropriate format.
f) Data is stored safely
What does Article 5(2) require of GDPR?
Controller shall be responsible for and able to demonstrate compliance with principles.
Examples of communication of specific reasoned info
Graphs, photos, evidence schedules, maps, contributing to market sentiment reports, advising on data storage, Advising on security, Benchmarking, complying with clients’ s data security.
How can you make sure data is secure?
- Password protection
- Security markings
- Lockable storage.
Best practice in data management
- Cross ref hard copy.
- IT system maintenance - back up
What is the UK implementation of GDPR?
Data Protection Act 2018
What are the principles of the Data Protection Act 2018?
Data is:
- Used fairly & transparently.
- Used for specific and explicit purposes.
- Accurate.
- Necessary