Data Management Flashcards
What is your understanding of the word Confidentiality?
Where information is provided, but is subject to confidence and not shared without permission.
What is your understanding of the term Meta Data, and why is this important?
1 - Meta Data is about a specific piece of data.
2 - Meta Data associated with a document could consist of information about the author, the file size, the date the document was created, and key words to describe the document.
3 - It should be afforded the same level of care as other confidential data.
4 - In a scenario where we are sharing a document or removing confidential components of a document, we should ensure that any confidential meta data is not shared inadvertently.
What is your understanding of Intellectual Property and Copyright?
1 - It is the right to control the use and ownership or original works.
2 - Generally, work created by an employee usually belongs to their employer unless copyrights are put in place.
3 - It is common within construction for a client to be granted license for use and reproduction of copyright material. This should be clearly defined.
4 - This could be the right to use a particular design by a sub-contracting specialist who retains control of the original copyright.
What is the Freedom of Information Act 2005?
1 - The primary piece of UK legislation that controls access to official information.
2 - It permits the public right of access to information held by public authorities.
3 - Information must also be published through the public authorities publication scheme.
4 - The act covers all information held and not just information since the act came into place
What are the benefits of cloud-based storage systems?
1 - Information is backed up securely on encrypted servers.
2 - Accessibility can be managed via online settings.
3 - Cloud systems are often cheaper than the costs of physically storing and managing files.
4 - It is convenient to send and share files online instead of mailing physical copies.
5 - Cloud systems are environmentally friendly.
6 - Multiple users can access the same documents.
7 - Documents and folder systems can be synchronized.
What is the meaning of a Non-Disclosure Agreement?
1 - NDA’s are used to protect against the disclosure or sharing of any confidential data.
2 - Prior to the confidential data being shared with the recipient, clients will typically request that the recipient signs up to an NDA.
3 - Often used when confidential, sensitive, innovative, or intellectual property information is being shared to prevent this information being used by competitors.
If two separate departments within your firm were working for two rival companies, how would you ensure client sensitive data was managed?
1 - Make the client aware of the risks involved and check their understanding of the conflict of interest.
2 - I would ensure a letter of Instruction to Continue was obtained from the client.
3 - Exclusivity of staff would be arranged.
4 - The use of non-disclosure agreements would be considered.
5 - Separate working locations from each of the teams would need to be put in place.
6 - Secure document and data storage would be arranged to be used exclusively for the separate teams.
What is the Data Protection Act 2018?
1 - The act replaces previous 1998 legislation and manages how personal data is processed by organisations and the government.
2 - It is the UK legislation for the implementation of the EU General Data Protection Regulations (GDPR).
What are the key principles of the Data Protection Act 2018?
The Act ensures that data is:
1 - Used fairly, lawfully, and transparently.
2 - Used in a way that is adequate, relevant, and limited to only the purpose it is intended.
3 - Is retained for no longer than is necessary.
4 - Processed securely, including the protection against unlawful use, loss or destruction.
What are a persons rights under the Data Protection Act 2018?
People have the right to:
1 - To be informed about how their data is being used.
2 - The right to access their data.
3 - The right to have incorrect data updated.
4 - To have their data erased.
5 - To stop or restrict the processing of their data.
6 - The right of portability.
7 - To object to the use of their data.
Who are the key persons outlined within GDPR?
1 - Controller. The natural person or legal entity that determines the purposes and means of the processing of personal data; for example, the employer would be the controller when processing an employees personal data.
2 - Processor. The natural person or legal entity that processes personal data on behalf of the controller; for example a call centre acting on behalf of the employer.
3 - Data Protection Officer (DPO). A leadership role required by EU GDPR. The role exists within companies that process the personal data of EU citizens. Responsible for overseeing the data protection approach, strategy and its implementation.
What are the 8 individual rights under GDPR?
1 - Right to be Informed.
2 - Right of Access
3 - Right of Rectification
4 - Right to Erasure
5 - Right to Restrict Processing.
6 - Right to Data Portability
7 - Right to Object
8 - Rights of Automated Decision Making & Profiling
9 - Diversity, Inclusion and Team Building
What different sources of information do you use in your day to day surveying?
1 - RICS Guidance Notes
2 - Contract documentation
3 - Previous tenders
4 - Cost plans
5 - Valuation data
6 - Industry journals
7 - Specialist sub-contractor information
How do you manage day-to-day sources of information to ensure compliance with the legislation?
1 - If signed up to an NDA with a client I ensure confidentiality and am not able to talk about these projects with colleagues who are not party to the project.
2 - I use lockable and secure document storage for hard copy documents. Electronic information is kept securely on encrypted servers.
3 - I lock my computer when away from my desk and comply with my company’s IT security policies; for example completion of cyber security courses and regularly updating my passwords.
4 - If sharing or processing information from a previous project which is not available in the public domain I always obtain the clients permission to do so.
How do company’s ensure compliance with the Data Protection legislation generally?
1 - They should only retain data they need to perform their day-to-day operations.
2 - If they are retaining someone’s data they should ensure the person is kept informed and advised on why they have it.
3 - They should hold the data securely.
4 - They should also keep the information up to date and delete information they no longer need.
