Data Management Level 1 Flashcards
Methods of collecting and storing data?
Emails, letters, questionnaires, surveys, cloud storage
Whats your online tendering system called?
We have recently got an online tendering system. However i work in a Trust and we have our own procurement team, so we send the information over to them and they upload and collate responses and send back to us.
GDPR?
The general data protection regulation is a regulation in EU law on data protection and privacy in the EU.
Gives individuals more control over their personal information
What kind of information do you store?
Sensitive information, tenders and client details.
What data systems do you have?
Planet systems, MICAD, RICS, ISURV, Oracle, Tendering Systems.
How long do you have to respond to a freedom of information request?
20 working days
How do you handle a freedom of information request?
Personally we gave a team who deal with FOI requests. However if i did have to deal with one
- Release the information if i have it
- Acknowledge that you do not hold the info
- Transfer the request to another authority, if they have this info.
- With hold the information by applying an exception and explain why
What data control systems do you have?
Password protected documents
Cloud bases
Drives
General locked cabinets / cupboards
What are the rights of GDPR
Rights of access, right to notification, right to erasure, right to restrict processing, right to data portability, right to object and the right to not be subject to a decision based solely on automated processing.
7 key principles of data protection
- Personal data must be processed lawfully, fairly and in a transparent manner
- Personal data must be processed for specified, explicit, and legitimate purposes
- Personal data must be adequate, relevant and not excessive
- Personal data myst be accurate and up to date
- Personal data shouldnt be kept longer than necessary
- Personal data must be processed securely
- The controller is responsible for GDPR and must demonstrate compliance
The data management process
- collecting, processing validating data and storing data
- interrogating different types of data from disparate sources
- ensuring high data availability and disaster recovery
- governing how data is used and accessed by people
- protecting and securing data and ensuring data privacy
What is the data protection act 2018
Controls how your personal information is used by organisations, businesses or the government
DPA - what data should or shouldnt you keep?
Any personal information you keep on staff should be adequate, relevant and not excessive.
Keep eg - pay rates, payroll, sickness. Or contractors contact details for projects