Data management

Question 1

Can you name any of the eight principles related to the protection, processing, and movement of data in the Data Protection act 2018?

Answer 1

1 – Fair and Lawful
2 – Purposes
3 – Adequacy
4 – Accuracy
5 – Retention
6 – Rights
7 – Security
8 – International transfers

Question 2

What is the Data Protection Act 2018?

Answer 2

The UK’s implementation of the General Data Protection Regulation (GDPR).
Sets out the framework for data protection law.

Question 3

What is the “right to be forgotten”?

Answer 3

Person can request a company deletes all data held on them, unless lawful reason for not doing so

Question 4

What is your firm’s policy on client data protection?

Answer 4

Follow GDPR
All data stored on encrypted cloud server
IT permissions prevent staff accessing data they do not need to
Do not release data to 3rd parties unless consent given

Question 5

How does your firm comply with GDPR?

Answer 5

• In house compliance officer (joe) writes and updates policy, distributes
• 7 principles of GDPR adopted, although being regulated by RICS means many are “automatic”
• GDPR mainly affects sharing client details, no longer allowed to do mailshots without providing an opt out policy.