Data management

Question 1

What are the aims of the GDPR?

Answer 1

Gives the public a say on what is done with their personal information

GDPR was aimed at protecting all EU citizens from privacy and data breaches

Question 2

What is meant by penalties regarding GDPR?

Answer 2

4% of companies global turnover or £20m if GDPR is breached

Question 3

What is the Data Protection Act 2018?

Answer 3

It gives individuals the right to know what information is held about them and provides a framework to ensure that it’s handled properly.

Question 4

What challenges does the Data Protection Act pose?

Answer 4

Multiple users on systems
Saving files in incorrect locations
Server breakdown causing work or data to be lost

Question 5

How is the GDPR relevant in your day to day work?

Answer 5

• ## I manage high amounts of sensitive data and this needs to be done in line with the data protection act and GDPR.

Question 6

What should companies have in place in regard to data protection?

Answer 6

Companies should employ a data protection officer, make sure they comply with all the data protection policy and be clear and transparent when talking about data.

Question 7

What is the Freedom of Information Act 2000?

Answer 7

The Act provides individuals or organisations with the right to request information

Question 8

How do you ensure that you comply with data protection legislation?

Answer 8

I store and keep confidential information in line with Mace’s policy and maintain the clear desk policies on a daily basis

Question 9

What data do you use in your work and how do you manage this?

Answer 9

Consider any data you collect such as financial figures, valuation figures, contact details, etc. and be able to explain how you ensure this complies with the legislation.

Question 10

What types of data is considered under GDPR?

Answer 10

Any personal data including:
Name
Religion
Sexual orientation
Trade union membership
Physical or mental health
Genetic data

Question 11

What must you do if you accidentally breach GDPR and send information to the wrong person?

Answer 11

• Report to the ICO (UK regulator) within 72 hours
• Report it internally
• Let the individual data subjects aware

Question 12

What is submitted to BCIS?

Answer 12

Project type
Time it was undertaken
Costs
Programme