Data management Flashcards
Can you share information obtained from Land Registry?
Yes, this is a publicly accessible source of data, so others could obtain this as well if they went directly to Land Registry.
How can you secure data?
Firewalls, password, encryption, secure devise, back up data, two-step verification
What data do you need to be aware of?
Personal data – data that relates to an identified or identifiable individuals. Could be as simple as a name, IP address, address, date of birth, etc.
This is applicable to me when collecting responses to public engagement consultation exercises.
What is a AVM?
Automates valuation model. It combines mathematical modelling and a database to provide property valuations.
What legislation specifically relates to data held by public bodies?
Freedom of Information Act 2000.
Requests must be made in writing.
20 days to respond.
What is the purpose of GDPR?
Provide data protection rights to individuals
What data is affected by GDPR?
Personal data, sensitive data, electronic data and manual data
Who does GDPR apply to?
Data controllers and processors
How long do you have to report a data breach to the ICO?
72 hours
What sources of data do you regularly use and how is it stored?
- Personal data from public consultations – held in a secure file location
- Technical data – held on a central project data base
What is your understanding of the latest GDPR requirements?
The GDPR forms part of the data protection regime in the UK, together with the new Data Protection Act 2018 (DPA 2018).
Holding data of UK residents largely unchanged, but dealing with EU is now different.
The GDPR applies to ‘controllers’ and ‘processors’. A controller determines the purposes and means of processing personal data. A processor is responsible for processing personal data on behalf of a controller.
You must identify valid grounds under the GDPR (known as a ‘lawful basis’) for collecting and using personal data
limited to what is necessary – you do not hold more than you need for that purpose.
You must not keep personal data for longer than you need it
What do you understand to be personal data?
Personal data – data that relates to an identified or identifiable individuals. Could be as simple as a name, IP address, address, date of birth, etc.
This is applicable to me when collecting responses to public engagement consultation exercises.
Explain the Freedom of Information Act and how that may affect you and any data you hold?
Freedom of Information Act, 2000. The Act gives everyone a legal right to see information held by public bodies (elected members, council employees, any person handling data on behalf of the council including consultants, volunteers, contractors and suppliers).
Council can refuse to provide information if:
* it would cost too much or take too much staff time to deal with the request
* the request is vexatious
* repeat request
* meets an exemption under the Act (e.g. court proceedings, information provided in confidence, health and safety, commercial interests)
* the request for information constitutes personal data about its employees
The Information Commissioner’s Office (ICO) is responsible for regulating and enforcing the Act.
Because the organisation that I work for holds information on behalf of a public body, data I hold could be subject to a Freedom of Information Request.
If you inadvertently left your laptop with sensitive clients’ information on a train what steps would you take in house and with your client?
Immediately notify my IT department.
Report to the police.
Notify my client of the incident and what my IT department has done to encrypt the data, etc.
What is a technical library and how are they used?
A digital library maintained by a contractor containing documentation relating to the contractor deliverables.
