Data Management

Question 1

What are the 7 principles of GDPR?

Answer 1

1. Lawfulness, fairness & transparency
2. Purpose limitation
3. Data minimisation
4. Accuracy
5. Accountability
6. Confidentiality & integrity (security)
7. Storage limitation

Question 2

What are the levels of fines / sanctions for failing to comply with GDPR?

Answer 2

Lower level: 10 million euros or 2% of annual turnover, whichever is highest.
Higher level: 20 million euros or 4% of annual turnover, whichever is highest.

Question 3

How would you deal with confidentiality if you were to send data overseas?

Answer 3

Once data is sent to an overseas location they become the data owners. To avoid this I would recheck all recipients of emails I am sending, not send sensitive data or confirm with the client or information owner that it’s OK to send data. Also check local laws.

Question 4

What are the benefits to good data management?

Answer 4

Streamlined Processes and Increased Efficiency
Better Data Consistency
Easier Data Sharing
Enhanced Privacy and Compliance
Backup and Recovery
Better security
Improved Data Integrity

Question 5

What is GDPR and how does the UK implement it within the UK?

Answer 5

GDPR (General Data Protection Regulations) is European law around data protection and how your personal data can be used.

The UK introduced the Data Protection Act to implement GDPR within the UK. It controls how business, organisations and the government can handle your information.

Question 6

What is the Data Protection Act 2018?

Answer 6

UK’s way of implementing the GDPR.

The act ensures data is used fairly, lawfully and transparently, used if a way that is relevant to it’s purpose and is not retained for any longer than is necessary.

The Act seeks to empower individuals to take control of their personal data and to support organisations with their lawful processing of personal data.

Question 7

Who are the key people under the GDPR rules?

Answer 7

• Controller - determines the purpose and means of processing the data
• Processor - processes personal data on behalf of controller
• Data Subject - info whom data is about
• Data Protection Officer - leadership role required by GDPR by companies how process data of EU citizens

Question 8

What are the 8 individual rights of GDPR and what do they ensure?

Answer 8

1) To be informed
2) To Access
3) To Rectification
4) To Erasure
5) To Restrict Processing
6) Portability
7) To Object
8) To automated decision making and profiling

Question 9

How long do you need to keep data for?

Answer 9

6 years of contract is underhand
12 years if contract is signed as a deed
RICS recommends 15 years (in line with legal claims)

Question 10

What are the benefits to EDMS?

Answer 10

• Real time updates/sharing
• Access anywhere
• Secure / password protected
• Can add access restrictions to confidential data

Question 11

What is the Freedom of Information Act 2000?

Answer 11

Provides public access to information held by public authorities

1) Public authorities obliged to publish certain information about their activities

2) Members of the public are entitled to request information from public authorities