Data Management L1 - SoE Q’s Flashcards
How long do you need to keep data for?
6 years if contract is signed underhand
12 years if contract is signed as deed
RICS recommends up to 15 years which is the limitation period for most legal claims.
What data systems do you use in your business?
Backup servers
Online transfer systems
Microsoft Teams
What are the benefits of cloud-based storage systems?
- Ease of access anywhere in the world
- Secure/ password protected
- Low cost to set up
- Access controls available for restricted/ confidential files
What is the Data Protection
Act 2018?
Controls how personal information is used by organisations, businesses and the government.
The Data Protection Act is the UK implementation of the GDPR regulations.
What is GDPR?
EU law for the protection of data and privacy in the EU and European Economic Areas. It also addressed the transfer of data outside of the EU and EEA.
Replaced by UK GDPR 2018.
What are the penalties for a data breach?
Fines up to (Higher Maximum - 4% of annual global turnover or 17.5 million pounds, whichever is higher)
(Standard Maximum - 2% of annual global turnover or 8.7 million pounds, whichever is higher)
Who enforces
GDPR?
The Information
Commissioners Office.
How long do you have to report a personal data breach and who to?
1.72 Hours
2. Report to the ICO -
(Information
Commissioner’s Office)
What should you consider before destroying information?
Does the information relate to a live
project.
Is the information backed up i.e. scanned copy saved in project file?
Is the document a contract/ legal document?
Could the document be required for litigation or other proceedings?
What are the data protection principles?
LAAPDSI
- Lawful, fairness and transparency
- Purpose limitation - personal data must be used for specific purposes
- Data minimisation - must not be excessive
- Accuracy
- Storage limitation - kept for no longer than necessary
- Integrity & confidentiality -
- Accountability - individual accountable for processing
What are the sensitive groups?
1.race
2.ethnic background
3.political opinions
4.religious beliefs
5.trade union membership
6.genetics
7.biometrics (where used for identification)
8.health
9.sex life or orientation
What are your rights under GDPR?
1.be informed about how your data is being used
2.access personal data
3.have incorrect data updated
4.have data erased
5.stop or restrict the processing of your data
6.data portability (allowing you to get and reuse your data for different services)
7.object to how your data is processed in certain circumstances
When do you also have rights when an organisation is using your personal data?
1.automated decision-making processes (without human involvement)
2.profiling, for example to predict your behaviour or interests
