Data Management

Question 1

How should you protect data?

Answer 1

• privacy is a human right
• look after personal info as if own valuables/cash
• concentrate and stay aware of sensitivity
• if in doubt contact Information Governance officer
• keep full and detailed records of all evidence used to reach opinion in comps/adjustments/inspection/measurements
• maintain commercial confidentiality
• keep complete property records

Question 2

What is the purpose of GDPR?

Answer 2

• designed to strengthen protection of personal information and extend rights and control individuals have over information
• protects special categories of personal data (race, sexuality etc.), require explicit consent
• can be fined up to 20 million euros
• under Data Protection Act 2018, have 72 hours to report a breach to ICO

Question 3

What are the principles of the Data Protection Act 2018?

Answer 3

(usually explained in privacy notice/policy)

1. used lawfully, fairly and transparently
2. collected for specific and legitimate purposes
3. adequate, relevant and limited to what’s needed
4. accurate and up to date
5. kept in a way which identifies individuals no longer than needed
6. used and kept securely

data controller: determines purposes and means of processing data
data processor: processes data on behalf of controller