Data Management

Question 1

What is GDPR?

Answer 1

• General Data Protection Regulation
• It is a legal framework that sets guidelines for the collection and processing of personal information
• Introduced by the EU

Question 2

What is the Freedom of Information Act?

Answer 2

• It provides a public right of access to information held by public authorities
• Public authorities are obliged to publish certain information about their activities
• Any member of the public can request information

Question 3

What is the Data Protection Act 2018?

Answer 3

• Controls how personal information is used by organisations, businesses or the government, in the UK
• it sits alongside the GDPR and tailor how the GDPR applies in the UK

Question 4

What is the BCIS / what does it provide?

Answer 4

• Building Cost Information Service
• Provides access to construction cost data to assist professionals in preparing early cost advice (estimating, cost planning and benchmarking)

Question 5

How long do you need to keep data for?

Answer 5

• 6 years – if the contract is signed underhand
• 12 years – if the contract is signed as a deed
  However:
• 15 years – recommended time as this is the maximum length of time a claim can be made against professional negligence

Question 6

How do your store data in your organisation?

Answer 6

• Shared hard drives
• Online storage systems such as the cloud/dropbox
• Software such as MS Teams

Question 7

If you had two different departments within your company working for rival clients, how would you protect the commercially sensitive client data?

Answer 7

• Exclusivity of staff working for each of the clients
• Have Non-disclosure agreements (NDAs) in place
• Dedicated servers
• Restricted access to certain folders on the system
• Anti-virus protection
• Shred any confidential information

Question 8

How does your company ensure compliance with the Data Protection Regulations generally?

Answer 8

• They only retain data that is needed to perform day-to-day operations.
• If they are retaining data they ensure the person is kept informed as to why they have it.
• They hold data securely.

Question 9

Who are the key persons outlined within GDPR?

Answer 9

1. Controller - Determines the purpose and means of processing data
2. Processor - Person that processes data on behalf of controller
3. Data Protection Offer - Person in a company that is responsible for overseeing the processing of all data.