Data Management (c)

Question 1

What is GDPR?

Answer 1

GDPR is the General Data Protection Regulation (2016), that came into effect on the 25th May 2018. It aims to create a single data protection regime for the European Union

Question 2

What Act Implemented the GDPR in the UK?

Answer 2

The Data Protection Act (2018), which replaces the Data Protection Act 1998 after 20 years.

Question 3

What do you need to do if you have a data breach?

Answer 3

Notify the Information Commissioners Office (ICO) within 72 hours of the breach occurring.

Question 4

What are the fines for non-compliance with GDPR?

Answer 4

Up to 4% of global turnover, or €20 million. (Whichever is greater)

Question 5

What are the principles of Data Protection Act 2018?

Answer 5

1. used fairly, lawfully and transparently
2. used for specified, explicit purposes
3. used in a way that is adequate, relevant and limited to only what is necessary
4. accurate and, where necessary, kept up to date
5. kept for no longer than is necessary
6. handled in a way that ensures appropriate security, including protection against unlawful or unauthorised processing, access, loss, destruction or damage

Question 6

What are the 8 Individual Rights Under GDPR?

Answer 6

1. Right to Information2. Right of Access3. Right of Rectification4. Right to Erasure5. Right to Restrict Processing6. Right to Data Portability7. Right to Object8. Right to Automated Decision Making| (IARERDOA)

Question 7

How has your organisation addressed the changes to data legislation that came into force with GDPR?

Answer 7

…

Question 8

What is an SAR?

Answer 8

Subject Access Request – Demand that the individual be given all the information that a company holds on them.

Question 9

When was the Freedom of Information Act Enforced, and what does it do?

Answer 9

The freedom of information Act came into effect in 2000, it allows an individual to request access to information held by a public body. The public body is required to provide that information (normally in 20 working days) in the requested format, however they can charge a fee for this.

Question 10

What are the principles of GDPR 2016?

Answer 10

A. There are seven:(1) Lawfulness, fairness and transparency.(2) Purpose Limitation – be specific about the purpose of the data collection.(3) Data minimization – only collect it when you need.(4) Accuracy.(5) Storage Limitations – store data for a necessary limited period and then erase.(6) Integrity and confidentiality – keep it secure.(7) Accountability – record and prove compliance.

Question 11

What is Land Registry update?

Answer 11

The Land Registration Act (2002), this provided: - A framework for the electronic property conveyancing - All freeholds and leases over 7 years must be registered - New regime for adverse possession (over 10 years)Works towards the Land Registry’s goal of having all property registered electronically by 2030.

Question 12

What is required for a Land Registry compliant plan?

Answer 12

A compliant plan with the following characteristics: - Drawn to scale of 1:100 or 1:200 - Have a scale measurement bar - Have the scale noted on the plan - Include a 1:1250 scale map of the location (for urban areas) - Full address including postcode - A north point - Demise in red outlined on inside edge of the property.

Question 13

What are the 6 principles of the Freedom of Information Act?

Answer 13

1. Maximum Disclosure
2. Publish Key Information.
3. Promote Open Government
4. Exceptions narrowly drawn .
5. Processed rapidly and fairly.
6. Minimum Costs