Data Management Flashcards

1
Q

What are the 7 principles of Data Protection Act 2018? (AKA 7 principles of GDPR)

A

Lawfulness, fairness, transparency

Accuracy

Accountability

Purpose limitation

Storage limitation

Data minimisation

Integrity and confidentiality

(LAAP SDI)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Examples of personal data under GDPR that could apply to property companies?

A

Data relating to:

investors, fund managers, valuations, compliance, background checks by HR etc

IF CV

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

When did GDPR come into effect

A

25 May 2018

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is GDPR?

A

EU General Data Protection Regulation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

To what organisations does GDPR apply?

A

All organisations of more that 250 employees

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are penalties for GDPR breaches?

A

4% of annual global turnover or £17.5million pounds.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How are data breaches typically discovered?

A

Access logs, reported thefts, lost equipment or data security incident
(ATLS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Examples of data held by surveying practices?

A

Payroll and HR

Customer data for marketing

Emails and corrspondance relating to clients and employees

(CEP)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What Act implemented GDPR in the UK?

A

Data Protection Act (2018)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Disadvantages of the systems you use?

A

Rely on data input completed by others - human error

External systems - firm is not in control of security

Not user friendly and lots of staff training required!

(HES)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is Data protection Act 2018 and what is the purpose?

A

The Data Protection Act 2018 (DPA 2018) governs how personal data should be processed, protecting the privacy rights of individuals.

Purpose -

1.Aims to create single data protection regime for anyone doing business in EU

  1. Empowers individuals to take control of how their data is used by third parties.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the 8 individual rights under GDPR

A

Right to be informed

Right of access

Right of rectification

Right to erasure

Right to restrict processing

Right to data portability (to use for own purposes)

Right to object

Right to automated decision making and profiling (as undertaken by insurance companies)

I,A,R,E R D,O,D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are some of the data security technologies you could use?

A

It demands that the individual be given all the information that a company holds on them.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

RICS best practice points for complying with GDPR?

A

Conduct data review

Anonymise data where possible

Encrypt everything where possible

CAE

Treat commercial data in same way as personal data, even though not covered by GDPR

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is ‘right to be forgotten’ under GDPR?

A

Under Article 17 of GDPR, individuals have right to have personal data erased in certain circumstances

Data no longer necessary

Data been processed unlawfully

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is SAR?

A

Subject Access Request:

individual can request for all the information that a company holds on them.

Fill in form outlining who they are inwriting and on headed paper.

17
Q

What is the ‘right to access’ under GDPR?

A

Individuals have the right to obtain confirmation that their data is being processed, and access to their personal data

18
Q

When would you report a data breach?

A

Need to report within 72 hours of becoming aware of breach .

Inform Data protection officer
Informing IT

If breach high risk, then need to notify ICO without delay.

19
Q

What is data portability?

A

Right for data subject to receive personal data concerning them which they have previously provided, and have it transmitted to another controller.

20
Q

What is data protection officer?

A

An individual appointed to monitor internal compliance and advise on an organisations data protection obligations

Only required if organisation is public body, authority or carrying out certain type of processing activity

21
Q

What is privacy by design?

A

data protection through technology design

22
Q

What are the obligations imposed by GDPR?

A

Knowledge of data you store.

Need to be able to (Provide information on how data is used) and the rights of individuals regarding their data

Need to be able to (Demonstrate data is being managed in compliant manner).

Must be able to (Delete every instance of an individuals data) - in compliance with ‘right to be forgotten’

(Must keep data in format that allows portability) to another data processor, should the need arise

23
Q

What is a Freedom of Information Act ?

A

Act of parliament that creates a public right of access

Allows an individual to request access to information held by a public body - Government for example.

Public body is required to provide that information (within 20 working days) in requested format

They can charge a fee for this

24
Q

What is an information barrier and how should it be enforced?

A
  1. Different surveyor should act for each client.
  2. They must be physically separated preferably in different
    buildings or on different floors with separate support teams.
  3. All information regarding the instruction should be securely stored.
  4. The firms compliance officer must oversee all actions.
25
Q

Who regulates GDPR in the UK?

A

Information Commissioners Office (ICO)

26
Q

RICS Professional statement for data management?

A

RICS PROFESSINAL STATMENT ON DATA HANDILING AND PREVENTIATION OF CYBER CRIME

27
Q

commercial v personal

A

treat both equally

28
Q

What is copyright?

A

It is a set of exclusive rights granted to the author. Rights can be licensed, assigned or transferred.

Cannot reproduce copyright without the expressed consent of the author.

29
Q

What ways can you protect your data?

A

Disk encryption
Regular back ups
Password protection
firewalls

30
Q

Is there any other way to formalise sensitive information between two parties?

A

NDA (Non Disclosure Agreement)

  • Legally enforceable contract between two parties relating to sensitive information.
31
Q

What is the purpose of a CPSE?

A

Commercial property standard enquiries and are in place to help foresee a smooth transition of a new tenancy by providing the relevant documentations; lease plans, licenses, SC budgets, EPCs etc.

32
Q

What is intellectual property?

A

This is data owned by a company/individual and cannot profit from the data.