Data Management Flashcards

1
Q

What data is held physically?

A
  • Deeds
  • Older lease documents
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is data?

A

Facts and statistics collected together for reference or analysis.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What should you consider when handling data?

A
  • Where it comes from and how reliable it is (e.g. co-star)
  • verification methods
  • types of data
  • how data should be stored securely (in accordance with the law)
  • Importance of inputting data correctly (i.e. tenancy schedule or trigger dates for property management systems - rent review etc)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How can you verify data?

A

Data should be verified against an alternative source (through triangulation)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Why is it important to keep data secured safely?

A
  • Keep data safe from corruption
  • Maintain privacy and protection
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How do you ensure data is stored securely?

A
  • Disk encryption (secure hard drive disk)
  • Regular backups
  • Password protection
  • Anti-virus software
  • Firewall and disaster recovery procedures
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is copyright?

A
  • A set of exclusive rights granted to the creator of any original work, including the right to copy
  • Copyrights can be licensed, assigned and transferred
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is Crown Copyright?

A
  • Refers to all material created and prepared by the Government (e.g. laws, public records, OS maps)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What should you do if you copy information from an original source?

A

It is essential that any copyright information duplicated in my work should be acknowledged.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the Data Protection Act 2018?

A

The data protection act 2018 is the UK’s implementation of GDPR

It controls how personal information is used by organisations, businesses or the government

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the key points of the Data Protection Act 2018?

A

The act is a complete data protection system

  • UK’s implementation of GDPR
  • It governs personal data covered by GDPR
  • Covers all other general data as previously covered in the former DPA 1998 act
  • gives people stronger rights to be informed about how their personal information is used
  • relates to personal data
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the difference between DPA 1999 and 2018?

A
  • Obligations in the new regulations are more prescriptive and penalties are greater.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the purpose of the Data Protection Act 2018?

A

Aims to create a single data protection regime for anyone doing business in the EU and to empower individuals to take control of how their data is used by 3rd parties.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the key requirements of the DPA 2018?

A
  • Conduct data protection impact assessment for high risk holding of data
  • Rights for individuals to have access to information on what personal data is held and have it erased.
  • Data controller decides how and why personal data is processed and is directly responsible for GDPR
  • Data accountability ensuring organisations can prove to the Information Commissioners Office how they comply with the new regulations
  • Data security breaches need to be reported to the ICO within 72 hours where there is a loss of personal data and a risk of harm
  • Increase in fines up to 4% of global turnover of the company or 20 million euros (whichever the greater)
  • Policed by ICO
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Who enforces Data Protection?

A

Policed / enforced by the Information Commissioners Office (ICO)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Every organisation or sole trader who processes personal information must…

A

register and pay a data protection fee to the ICO

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is the timeframe of reporting a data security breach?

A

Data security breaches need to be reported to the ICO within 72 hours where there is a loss of personal data and a risk of harm

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are the principles of GDPR?

A

Principles relating to the storage of personal data states that data must be:

Lawfulness, fairness and transparency - Processed lawfully, fairly and in a transparent manner

Purpose limitation - data collected for specified, explicit and legitimate purposes

Data minimisation - limited to what is necessary

Accuracy - Accurate and kept up to date (inaccurate data should be erased / rectified without delay)

Storage limitation - kept in a form which permits identification of data subjects for no longer than is necessary for the purpose.

Integrity and confidentiality (security) - Protection against unauthorised and unlawful processing and against accidental loss, destruction, damage (kept secure in locked filing cabinet or fire wall)

Accountability - Controller responsible for and be able to demonstrate compliance

19
Q

What is the role of a Data Controller?

A
  • Responsible for being able to demonstrate compliance with the principles of GDPR
  • Decides how and why personal data is processed.
20
Q

What are the 8 individual rights under GDPR?

A
  1. Right to be informed
  2. Right to access
  3. Right to rectification
  4. Right to erasure
  5. Right to restrict processing
  6. Right to data portability (own purposes)
  7. Right to object
  8. Right to automated decision making and profiling (as undertaken by insurance companies)
21
Q

What is the Freedom of Information Act 2000?

A

Gives individuals the right of access to information held by public bodies.

22
Q

What is the process of the Freedom of Information Act 2000?

A
  • Must tell any individual requesting sight of information whether it holds it.
  • Supply the information within 20 working days in the format requested
23
Q

What are the exemptions of the Freedom of information act 2000?

A
  • Contrary to GDPR requirements (i.e. personal data)
  • Prejudice a criminal matter under investigation
24
Q

How can you improve the security of data?

A
  • Firewall, encryption or passwords
  • Non-disclosure agreement
25
Q

What is a Non-disclosure agreement?

A

NDA’s are legally enforceable contracts that create a confidential relationship between a person who has sensitive information and a person who will gain access to that information.

26
Q

Is there a Guidance note or professional statement for Data Handling?

A

No it was proposed but it is not in place.

27
Q

What does GDPR stand for?

A

General Data Protection Regulation

28
Q

When did GDPR come into affect?

A

New rules relating to how we collect and process personal data - the EU General Data Protection Regulation (GDPR) - came into effect in the UK on 25 May 2018.

29
Q

Have you completed any training on GDPR ? what did you learn ?

A
30
Q

What are the maximum fines (UK GDPR) , how are the fines calculated ?

A

£17.5 million or 4% of the total annual worldwide turnover in the preceding financial year, whichever is higher

31
Q

What legislation covers data protection in the UK ?

A

Data Protection Act 2018 and UK GDPR

32
Q

Does GDPR apply post Brexit ?

A

Yes, many aspects of GDPR is within ‘UK GDPR’ which sits alongside an amended version of the DPA 2018.

Companies will still need to comply.

33
Q

What were the changes (GDPR post Brexit)?

A

UK government will control the UK GDPR as opposed to the European union.

34
Q

Who oversee information rights in the UK ?

A

ICO - International Commissioners Office

35
Q

What happens if you are sharing or processing data from the EU ?

A

Adhere to :
* UK GDPR
* EU GDPR
* Data Protection Act 2018

36
Q

How do you ensure data you hold on clients is kept secure and confidential ?

A

I use secure documents that are stored in password protected files.

I only keep the information I need and use it for the purpose it has been collected without passing it on unless I have approval prior.

37
Q

How have you changed the way you managed data during COVID 19 and home working ?

A

Only allowed to use work equipment, the storage of files/documents to be locked away, regular update on password protected equipment etc.

38
Q

What should you do if there is a data breach ?

A

Inform the Information Commissioner’s Office not later than 72 hours after becoming aware of it.

39
Q

Can you give me some example of the data you manage ?

A
  • Client details
  • Finances
  • Contact details
  • Complaints
40
Q

What is personal data ?

A

Personal data only includes information relating to natural persons who:

  • can be identified or who are identifiable, directly from the information in question; or
  • who can be indirectly identified from that information in combination with other information.
  • Personal data may also include special categories of personal data or criminal conviction and offences data. These are considered to be more sensitive and you may only process them in more limited circumstances.
41
Q

Can you expand on what BCIS is ?

A

The Building Cost Information Service, provides cost and price data for the UK construction industry. It is a part of the Royal Institution of Chartered Surveyors.

42
Q

What kind of information is ‘sensitive’ information?

A

Health records, financial information, address, educational records etc

43
Q

What is the difference between a deed and a registered title?

A

The deed is the physical document that proves ownership

The title is the concept of legal ownership that the deed grants you

44
Q

What do you know about GDPR?

A

General Data Protection Regulations:

  • 7 principles
  • Now the ‘UK GDPR’ which sits alongside an amended version of the DPA 2018.