Data Management

Question 1

What does the Data Protection Act (2018) set out?

Answer 1

Data Protection Act (2018)

Controls how personal information can be used and your rights to ask for information about yourself

Sets out the need to use information;
- Fairly
- Lawfully
- Transparently

Question 2

What are some methods to keep data secure?

Answer 2

• Firewalls
• Encryption
• Cloud-based storage
• Regular back-ups
• password protection
• anti-virus software

Question 3

What is copyright?

Answer 3

-A set of exclusive rights for the creator/author of any original work, including the right to copy
- It is essential that you acknowledge any copyright for information duplicated in your work

Question 4

Can copyright be transferred?

Answer 4

A copyright owner can sell or transfer their rights to someone else. This is known as a copyright assignment.

Question 5

What are the key pieces of data protection legislation in the UK?

Answer 5

Data Protection Act, 2018 and UK GDPR (General Data Protection Regulation)

Question 6

What are the key aims of UK GDPR?

Answer 6

• aim to create a single data protection regime affecting businesses
• empower individuals to take control of how third parties use their data
• give people the right to be informed about how their personal data is used

Question 7

What Individual rights are laid out in the UK GDPR?

Answer 7

• Right to access
• Right to be informed
• Right of erasure
  -Right of rectification
  -Right to object
• right to data portability
• right to restrict processing
  -right of automated decision making and profiling

Question 8

What are some of the obligations for companies under the UK GDPR and Data Protection Act 2018?

Answer 8

• Conduct data protection impact assessments for holding high risk data
• demonstrate compliance to the Information Commissioner’s Office

Question 9

Which body polices compliance with the UK GDPR and Data Protection Act 2018?

Answer 9

The Information Commissioner’s Office

Question 10

What are the max fines for breaching the UK GDPR and Data Protection Act 2018?

Answer 10

Up to 4% of global turnover or £17.5m (whichever is greater)

Question 11

When must data security breaches be reported to the ICO?

Answer 11

• Where it involves personal data and where there is a risk of harm to individuals
• These breaches must be reported within 72 hours

Question 12

What right does the Freedom of Information Act 2000 confer to individuals?

Answer 12

• The right of access to information held by public bodies

Question 13

How must a public body respond to an FOI request?

Answer 13

• They must confirm to the requestor whether they hold the requested information
• They usually must supply the information in the requested format within 20 working days
• They are able to charge for the provision of the information

Question 14

What are some possible exemptions for FOI requests?

Answer 14

• The information could prejudice a criminal investigation or an individual’s/company’s commercial activities
• The information is contrary to GDPR requirements

Question 15

Are you aware of any proposed RICS guidance related to data protection?

Answer 15

There is a proposed Professional Standard on data handling and preventing cybercrime
- This will address surveyors’ handling, storing and sharing of data and is likely to mandate training and practices for regulated firms and members

Question 16

What is a non-disclosure agreement?

Answer 16

• A legally enforceable contract between two parties relating to sensitive information

Question 17

What can a party do if an NDA is breached by the counterparty?

Answer 17

They can take legal action to seek damages for any losses incurred

Question 18

How do you validate information?

Answer 18

Source – is the source credible and reliable

Time – how recent is the information gathered is it as up to date as possible

Relevance – is the information gather directly related to your need or purpose

Sense check – try to verify the information by cross referencing

Question 19

What is the difference between a deed and a registered title?

Answer 19

Title refers to the ownership of a property

Deeds is the legal document that transfers title from one person to another

Question 20

What does encryption mean?

Answer 20

Encryption the process of converting information or data into a code, especially to prevent unauthorized access

Question 21

What is a firewall?

Answer 21

Firewall is software that blocks unexpected connections coming into or out of a network