Data Management

Question 1

What are the 8 individual Rights under GDPR?

Answer 1

I- Right to be Informed
A- Right of access
R- Right to rectification
E- Right to Erase
R- Right to restrict processing
D- Right to data portability (use for their own purposes)
O- Right to object
Right to automated decision making and profiling

Question 2

Tell me more about a Non Disclosure Agreement

Answer 2

Legally enforceable contract between 2 parties relating to sensitive info. Agreement will create a confidential relationship between a person who has sensitive info and a person who has access to that info. Party that was harmed by the breach of NDA can take legal action to enforce the agreement and seek damages for any losses that were incurred.

Question 3

What type of data security technologies are there?

Answer 3

Disk Encryption
Regular backups off-site
Cloud storage
Password protection and use of anti-virus software protection
Firewall and disaster recovery procedures

Question 4

What types of tasks would you complete on Excel?

Answer 4

Analsying comparable sales data, data analysis e.g. pivot tables, charts and graphs.

Question 5

What makes information sensitive?

Answer 5

Confidentiality- Personal data, financial details, propriety info
Privacy concerns- personal safety risk
Commercial or competitive value- Business info that could harm an organisation’s position or operations if leaked.
Security risk- passwords, sensitive gov or military info

Question 6

What principles are outlined in the UK GDPR Article 5(1)?

Answer 6

Processed lawfully and in a transparent manner.
Collected for specified and legitimate purposes.
Accurate and up to date (inaccuracies should deleted or rectified ASAP).
Kept in a way that the subject should not be identifiable for longer than necessary.
Processed to ensure security of data

Question 7

What happens to password-protected documents when you leave the company?

Answer 7

Password protected documents will be created and run by the IT department. They’ll give you the password which you will not be able to change. If you leave, then the IT department can provide details of the password if the document is needed by others.

Question 8

How did you verify the information from your comps?

Answer 8

Spoke to the letting agents and if possible the tenants agent in order to verify the information I was being told. Would assume they are not lying as they are RICS professionals who should be following the code of conduct.

Question 9

What would you do if you accidentally send out personal details to another applicant?

Answer 9

Call/follow up email telling them to delete the information without opening it, inform the LSH Data Protection Office (who may inform ICO within 72 hours), let the person whose data was breached know

Question 10

How do you ensure you keep client’s data secure?

Answer 10

By following the Data Protection Act 2018

LSH have password protected computers with an encrypted VPN.

I also ensure I do not leave any papers on my desk overnight.

Question 11

What is an EMP?

Answer 11

Estate Management Plam

Question 12

What does Dual Authentication mean?

Answer 12

Dual authentication (or two-factor authentication, 2FA) requires two verification methods for added security. Typically:
-Something you know: like a password.
-Something you have: like a phone or security code.

Question 13

What is the Data Protection Act 2018?

Answer 13

-UK’s implementation of the General Data Protection Regulation 2016 (GDPR)
-It aims to create a single data protection regime affecting businesses, and empower individuals to take control of how their data is used by third parties.
-It gives people the right to be informed about how their personal information is used.

Question 14

What is GDPR?

Answer 14

-General data protection regulation
-Relates to personal data
-Aims to create a single data protection regime for anyone doing business in the EU and to empower individuals to take control of how their data is used by third parties
-Gives people stronger rights to be informed about how their personal information is used

Question 15

How has your firm changed their data management practices to comply with GDPR?

Answer 15

-Conducted data protection impact assessments i.e. evaluated risks associated with holding information about individuals
-Ensure data accountability through the appointment of a named data controller
-Contacted individuals who were on distribution lists to confirm that they wanted to be contacted
-Trained staff
-Ensured correct firewalls were in place to ensure appropriate security of personal data

Question 16

What is the Freedom of Information Act 2000?

Answer 16

Gives individuals the right of access to information held by public bodies.

Question 17

What does the Freedom of Information Act 2000 require of public bodies?

Answer 17

-Public body must tell any individual requesting sight of information whether it holds it
-Normally the public body is required to supply it in 20 working days in the format requested
-It can charge for the provision of the information

Question 18

What are the elements of a Non-Disclosure Agreement (NDA)?

Answer 18

-Identification of the parties
-Definition of what is deemed to be confidential
-Scope of the confidentiality obligation by the receiving party
-The exclusions from confidential treatment
-The length of term of the agreement

Question 19

What do you understand by the term security of data?

Answer 19

Means ensuring that data is kept safe from corruption and that access to it is suitably controlled to ensure privacy and protection

Question 20

How can security of data be improved?

Answer 20

-Disk encryption - encrypting data on a secure hard disk drive
-Regular back ups off site
-Password protection
-Use of anti-virus software protection
-Firewalls and disaster recovery procedures

Question 21

What does copyright mean?

Answer 21

-A set of exclusive rights granted to the author or creator of any original work, including the right to copy
-These rights can be licensed, assigned or transferred
Form of intellectual property

Question 22

What does Crown Copyright cover?

Answer 22

All materials created and prepared by the Government, such as laws, public records, official press releases and OS mapping

Question 23

What are restrictive covenants?

Answer 23

-Agreement to restrict the use of land in some way for the benefit of other land users
-They are enforceable by successors as they run with the land

Question 24

What are the RICS Data Standards, 2018?

Answer 24

-Set of standards to support the capture, verification and sharing of data in a common format
-They address issues of digital data consistency

Question 25

What are the 8 Principles of Data Protection Act 2018

Answer 25

P- Processed Fairly & Lawfully
L- Not kept longer than necessary
A- Adequate and not excessive
C-Not transferred to countries without the same data security
A- Accurate & up to date
R- Relevant
D- Data subject’s rights
S-Kept Securely