Data management Flashcards
What are the regulations around the use of data? (Data Protection Act, GDPR)
- The Data Protection Act 2018
- Freedom of Information Act 2000.
- It covers the collection, storage and processing of data and the rights for individuals to obtain copies of data about themselves.
Are you required to keep certain documents for any length of time?
- 6 year if the contract is written under hand
- 12 years for contract signed by deed
• RICS recommends 15 years as this is max a claim against professional negligence can be made
How do you ensure data is kept secure in your workplace?
I would make sure to follow my company’s data protection policy. This includes:
- Locking my computer when away
- Paper free desk and using my locker for confidential information
- Use shredder for documents
- Ensure to categorize my soft copy documents with the correct coding - eg. public, private and restricted.
What are the key differences you refer to between GDPR and the DPA?
DPA - Data Protection Act GDPR -General Data Protection Regulation
- DPA is an act and GDPR is regulation (Regulations are supplementary to act)
- The DPA is wider in scope than the GDPR,
- The Data Protection Act 2018 is the UK’s implementation of the General Data Protection Regulation (GDPR).
What is GDPR?
- The General Data Protection Regulation is a regulation in EU law on data protection and privacy for all individuals within the European Union and European Economic Area; Came into force on 25th May 2018
- The Data Protection Act 2018 is the UK’s implementation of the General Data Protection Regulation (GDPR)
What are GDPR principles?
Everyone responsible for using personal data has to follow strict rules called ‘data protection principles’. They must make sure the information is:
- used fairly, lawfully and transparently
- used for specified, explicit purposes
- used in a way that is adequate, relevant and limited to only what is necessary
- accurate and, where necessary, kept up to date
- kept for no longer than is necessary
- handled in a way that ensures appropriate security, including protection against unlawful or unauthorised processing, access, loss, destruction or damage
How would you treat confidential data?
I would make sure to follow my company’s data protection policy. This includes:
- Locking my computer when away
- Paper free desk and using my locker for confidential information
- Use shredder for documents
- Ensure to categorize my soft copy documents with the correct coding - eg. public, private and restricted.
What is the Data Protection Act?
- It gives individuals the right to know what information is held about them and provides a framework to ensure that it’s handled properly.
- The Data Protection Act 2018 controls how your personal information is used by organisations, businesses or the government.
How do you determine if a document is public, private or restricted?
There is a matrix based on the reputation impact, financial impact and legal impact.
How is the GDPR relevant in your day to day work?
- I manage high amounts of sensitive data and this needs to be done in line with the data protection act and GDPR.
How is the GDPR relevant to the construction industry?
Companies should employ a data protection officer, make sure they comply with all the data protection policy and be clear and transparent when talking about data.
What is the freedom of information act 2000?
The Freedom of Information Act 2000 (FOIA) is a UK Act of Parliament that creates a public ‘right of access’ to information held by public authorities. There are two ways in which this is provided:
Public authorities are obliged to publish certain relevant information.
Members of the public are entitled to request information from public authorities.
Is the data protection act superseded?
Is the data protection act superseded?
What are the 7 principles of GDPR?
Lawfulness, fairness and transparency
Purpose limitation
Data minimisation
Accuracy
Storage limitation
Integrity and confidentiality (security)
Accountability
What types of data is considered under GDPR?
Any personal data including:
Name
Religion
Sexual orientation
Trade union membership
Physical or mental health
Genetic data