Data Management Flashcards

1
Q

What is the Data Protection Act 2018?

A
  • UK’s implementation of the General Data Protection Regulation 2016 (GDPR)
  • Complete data protect system – as well as governing personal data covered by GDPR, it covers all other general data as previously covered by the 1998 Act
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is GDPR?

A
  • General data protection regulation
  • Relates to personal data
  • Aims to create a single data protection regime for anyone doing business in the EU and to empower individuals to take control of how their data is used by third parties
  • Gives people stronger rights to be informed about how their personal information is used
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

When did GDPR come into force?

A

May 2018

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the key requirements under GDPR?

A
  • Obligation to conduct data protection impact assessments for high risk holding of data
  • New rights for individuals to have access to information on what personal data is held and to have it erased
  • A data controller decides how and why personal data is processed and is directly responsible for GDPR
  • ‘Data accountability’ ensuring that organisations can prove to the Information Commissioners Office (ICO) how they comply with the new regulations
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What does Article 5(1) of GDPR state in relation to the processing of data?

A

Data must be processed lawfully, fairly and in a transparent manner in relation to individuals

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does Article 5(1) of GDPR state in relation to the collection of data?

A

Data must be collected or specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does Article 5(1) of GDPR state in relation to the relevance of data?

A

Data must be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does Article 5(1) of GDPR state in relation to the accuracy of data?

A

Data must be accurate and, where necessary kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purpose for which they are processed, are erased or rectified without delay

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What does Article 5(1) of GDPR state in relation to the form which data is kept in?

A

Data must be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does Article 5(1) of GDPR state in relation to the the processing of data?

A

Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisation measures

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Who does Article 5(2) of GDPR state is responsible for the compliance with the principles outlined in Article 5(1)?

A

The data controller shall be responsible for, and be able to demonstrate compliance with the principles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the 8 individual Rights under GDPR?
AIRER POA

A
  1. Right of access
  2. Right to be informed
  3. Right to rectification
  4. Right to erasure
  5. Right to restrict processing
  6. Right to data portability (to use for their own purposes)
  7. Right to object
  8. Rights to automated decision making and profiling (as undertaken by insurance companies
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What do you understand by the term security of data?

A

Means ensuring that data is kept safe from corruption and that access to it is suitably controlled to ensure privacy and protection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How can security of data be improved?

A
  • Disk encryption - encrypting data on a secure hard disk drive
  • Regular back ups off site
  • Password protection
  • Use of anti-virus software protection
  • Firewalls and disaster recovery procedures
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What does Crown Copyright cover?

A

All materials created and prepared by the Government, such as laws, public records, official press releases and OS mapping

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is a deed?

A

A legal document made under seal

17
Q

How can you prove ownership of land which is not registered with the Land Registry?

A

The Deeds will set out information about the ownership and details of a property

18
Q

What do the Land Registry provide upon request and payment?

A

Copy of the official Title Register for registered property or land in the UK

19
Q

How do the MSCI produce their Real Estate indices?

A

Draw on up-to-date valuations of selected UK properties

20
Q

What are the RICS Data Standards, 2018?

A
  • Set of standards to support the capture, verification and sharing of data in a common format
  • They address issues of digital data consistency
21
Q

What data are the RICS Data Standards, 2018 already available for?

A
  • International Property Measurement Standards (IPMS)

* International Construction Measurement Standards (ICMS)

22
Q

What additional data are the RICS Data Standards, 2018 going to be made available for?

A
  • International Valuation Standards (IVS)

* International Land Measurement Standard (ILMS)

23
Q

What does the colour coding on Title Plans represent?

A
  • Red Line – boundary of registered land
  • Green Line – boundary of land removed from title
  • Green Shading – land excluded from the title but within area
  • Blue shading – right of way on registered land for use by other land
  • Orange shading – right of way on other land for use by registered land
24
Q

What is included in a Land Registry title register?

A
  • A: Property register - description of the property, tenure, the date the property was first registered and any rights it may benefit from e.g. private right of way
  • B: Proprietorship register - name and address of the current owner, when they bought the property, how much was paid for it (if sold since 1 April 2000), any restrictions that limit the power of the owner and the class of the title
  • C: Charges register - mortgages and other financial burdens received on the property. Other rights or interest that limit how the land or property can be used e.g. leases, rights of way or covenants
25
Q

What is “personal data” as defined by GDPR?

A

Personal data are any information which are related to an identified or identifiable natural person e.g. the telephone number, email address

26
Q

Who does GDPR apply to?

A

Affects any company that trades with the EU, regardless of their location

27
Q

Who is GDPR governed by?

A

Information Commissioners Office

28
Q

GDPR Penalties?

A

4% global turnover of company
or €20mill whichever is higher

29
Q

What is the UK Data Legislation?

A

Data Protection Act 2018

30
Q

What is the right to be forgotten?

A
  • The data that people/firms have on someone can be asked to be erased under the GDPR act.
  • There is one month to respond to the request.
31
Q

What is the Freedom of Information Act and what year?

A

2000
Provides public access to information held by public authorities.
- public authorities are obliged to publish certain information about their activities;
and
- members of the public are entitled to request information from public authorities.

32
Q

What are the 8 key principles within the Data Protection Act.

A
  1. Data must be collected and used fairly within the Law.
  2. Data can only be used the way it is registered with the Information Commissioner.
  3. The information held must be adequate for its purpose.
  4. The information must be up-to-date.
  5. Data must not be stored longer than needed.
  6. Data must be used in line with the rights set out in the Data Protection Act.
  7. The information must be safe and stored away from unauthorised access.
  8. Data must not be transferred outside the European Economic Area unless the country has its own safe data protection law.
33
Q

What is ISO 14001?

A

ISO 14001 sets out the criteria for an environmental management system.

It maps out a framework that a company or organization can follow to set up an effective environmental management system.

34
Q

What is ISO9001

A

SO 9001 sets out the criteria for a quality management system.

This standard is based on a number of quality management principles including a strong customer focus, the motivation and implication of top management, the process approach and continual improvement.

35
Q

What are SARs?
What is a SAR?

A

Subject Activity Request
A person asking a Company what information is held on them