Data management Flashcards
Secure data storage options?
- disk encryption
- back-ups
- password protection
- anti-virus protection
- firewalls and recovery procedures
What is copyright?
- rights granted to an author or creator, including the right to copy
- Rights can be licensed, assigned or transferred
- form of intellectual property
What is crown copyright?
Material created by government such as laws, press release, and OS mapping
What are the requirements of Copyright?
Copyright must be acknowledged if duplicated in work such as a report
What is GDPR?
General Data Protection Regulation 2016
What is the Data Protection Act 2018?
UKs implementation of GDPR - replaced DPA 1998 and relates to personal data
What is the DPA for?
It aims to create a single data protection regime for anyone doing business in the EU and to empower individuals to take control of how their data is used by third parties. It gives people stronger rights to be informed about how their personal information is used
What are the key requirements of the DPA?
- An obligation to conduct data protection impact assessments for high risk hold~ng of data
- New rights for individuals to have access to information on what personal data is held and to have it erased
- A new principle of ‘data accountability’ ensuring that organisations can prove to the Information Commissioner’s Office (ICO) how they comply with the new regulations
- Data security breaches need to be reported to ICO within 72 hours where there is a loss of personal data and a risk of harm to individuals - it is policed by ICO
What are the principles of GDPR?
Principles relating to the storage of personal data states that data must be:
processed lawfully, fairly and in a transparent manner in relation to individuals; _
* collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes;
* adequate, relevant and limited to what is necessary for the purposes for which they are processed;
* accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
* kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; _ _ _
* processed in a manner that ensures appropriate security of the personal data, including protection
What is the freedom of information act 2005?
- The primary piece of legislation that controls access to official information
- Permits the public right of access to information held by authorities
- Information must be published through the public authorities’ publication scheme
Gives individuals the right of access to information held by public bodies.
* The public body must tell any individual requesting sight of information whether it holds it
* Normally the public body is required to supply it in 20 working days in the format requested
* It can charge for the provision of the information
What is a non-disclosure agreement?
a contract by which one or more parties agree not to disclose confidential information that they have shared with each other as a necessary part of doing business together.
How do data breaches occur?
- employee mistakes
- equipment failure
- hacking or cyber attacks
- malware
- loss of equipment
How do you prevent data breaches?
Training on:
1. dealing with a data breach
2. how to transfer data securely
3. compliance with the firm’s data protection policy
4. how to avoid becoming a victim of cybercrime, phishing etc
5. care when using social media
6. use of proper passwords
7. ensure suppliers comply with the Data Protection Act 2018
What are examples of staff training and procedures?
- appoint a person to handle data enquiries and controls
- provide documentation on processes and rights about how data is held, how consent can be revoked, objection to activities, deletion
- processes to deal with a data breach (when to inform those affected, when it needs to be reported)
- ensure compliance with law
Data retention periods in case of claims?
- six years from when the service was provided
- six years from when a loss was suffered
- 15 years if the claimant did not know a loss was suffered earlier
- 12 years depending on type of instruction and claim
What RICS guidance covers Data protection?
RICS guidance note Risk, liability and insurance