Data Management Flashcards

1
Q

How can data be kept secure?

A

Regularly changing passwords
Firewalls
Encryption
Virus protection
Two-step verification
Backing up data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the benefits of cloud based storage?

A

Securely backed up
Accessibility can be managed
Cheaper than physical storage
Easier to collaborate on documents

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is an NDA?

A

An NDA is an agreement that prevents the disclosure of confidential data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

When may an NDA be used?

A

If confidential, sensitive or intellectual property information is involved. Can be used to prevent competitors from accessing it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Intellectual Property?

A

It refers to creations of the mind and is protected in law to enable creators to earn recognition and financial rewards

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is Copyright?

A

The right a creator has over their work.
Automatically given to creators and prevents others from copying, sharing or distributing their work without permission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is a Trademark?

A

A sign that distinguishes one brand from another.
Must be registered for a fee.
Prevents others from using the brand without permission
Allows creator to sell and license their brand and use trademark symbol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is a Patent?

A

An exclusive right for an invention
Complicated application process that incurs a fee
Can only be used for something new, inventive and a physical product or technical method/process

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What types of data does your organisation handle?

A

Personal data of employees and customers
Property information
Sensitive and confidential emails/files
Contractual information of companies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which public authority upholds the information rights in the UK?

A

The Information Commissioners Office (ICO)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the UK’s implementation of the GDPR?

A

The Data Protection Act 2018

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does GDPR stand for?

A

General Data Protection Act

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Who does the GDPR apply to?

A

Data controllers and processors

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is a Data Controller?

A

The entity that determines the purpose and meaning of processing personal data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is a Data Processor?

A

The entity that processes the data on behalf of the controller

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is personal data?

A

Information that can be used to directly or indirectly identify the person, or data subject, to whom the information relates

17
Q

What is a Data Protection Officer (DPO)?

A

Inform and advise the controllers and processors of their obligation

Monitor the controllers and processors

Advise on Data Protection Impact Assessments (DPIA)
Act

Act as a contact point between data subjects and ICO, where necessary

18
Q

When is a DPO required?

A

Under Article 37:
Public bodies
Organisations handling certain types of data
Organisations handling large amounts of data

19
Q

What are the principles of GDPR?

A

Article 5:

Lawfulness, fairness, transparency
Purpose limitation
Data minimisation
Accuracy
Storage limitation
Integrity and confidentiality
Accountability

20
Q

What rights do the GDPR provide?

A

Articles 15-22:

Right to be informed
Right of access
Right to rectification
Right to erasure
Right to restrict processing
Right to data portability
Right to object
Rights relating to automated decision making & profiling

21
Q

What are the lawful bases for processing personal data?

A

Article 6:

Consent
Contract
Legal obligation
Vital interests
Public task
Legitimate interests

22
Q

What is the time limit for reporting GDPR data breaches?

A

72 hours

23
Q

What is the standard maximum for a GDPR breach fine?

A

Higher of 2% worldwide annual turnover or £8.7m

24
Q

What is the higher maximum for a GDPR breach fine?

A

Higher of 4% worldwide annual turnover or £17.5m

25
Q

What is the FOIA?

A

It gives the public the right to access information held by public authorities

Requires public authorities to publish certain information about their activities

26
Q

What information does FOIA cover?

A

Recorded information held by public authorities, such as files, letters, sound/video recordings, photos etc.

27
Q

Does FOIA give people access to personal data?

A

No

28
Q

What should someone requesting personal data about themselves do?

A

Make a Subject Access Request under the DPA 2018

29
Q

What are the principles of the FOIA?

A

Everyone has a right to access official information - presumption in favour of disclosure
No reason required for request
Requests and requesters treated equally

30
Q

What duties does the responder have to an FOI request?

A

Inform requester if information is held and provide that information

31
Q

What is the time limit for dealing with an FOI request?

A

Section 20 - 20 working days

32
Q

What does an FOI request need to be valid?

A

It must be in writing
Applicants real name
Address that the applicant can receive correspondence to
Description of information required

33
Q

When can an FOI request be refused?

A

It would cost too much or take too long to deal with
The request is vexatious
It is a repeat of a request from the same person

34
Q

When can information be withheld under FOIA?

A

Part II of the FOIA lists the exemptions

35
Q

What does CRCA stand for?

A

Commissioners for Revenue and Customs Act

36
Q

What is the CRCA?

A

It is an Act that established HMRC and sets out their statutory functions, as well as imposing a statutory duty of confidentiality

37
Q

What impact does the CRCA have?

A

All information held by the organisation is covered by the duty of confidentiality and can only be disclosed in one of the circumstances stated in section 18

38
Q

What happens if information is wrongly disclosed under CRCA?

A

Section 19 makes wrongful disclosure a criminal offence. Disciplinary action at work will also been imposed.

39
Q

Are there time limits for dealing with a CRCA request?

A

Not in the act. Each department will have a policy