*EP APC Data Management Flashcards
What is GDPR 2016?
- General data protection regulation
- Relates to personal data
- Aims to create a single data protection regime for anyone doing business in the EU and to empower individuals to take control of how their data is used by third parties
- Gives people stronger rights to be informed about how their personal information is used
Came into force May 2018
Fines under GDPR?
The UK GDPR and DPA 2018 set a maximum fine of
£17.5 million or 4% of annual global turnover – whichever is greater –
for infringements
What are the principles of GDPR?
- Information processed lawfully, fairly and transparently.
- Collected for legitimate reasons
- Must be relevant
- Must be accurate
- Must not be kept for longer than necessary
- Processed securely
What are the 8 rights of GDPR?
- Informed - Before data is collected, a data subject has the right to know how it will be collected, processed, and stored, and for what purposes.
- Access – After data is collected, a data subject has the right to know how it has been collected, processed, and stored, what data exists, and for what purposes.
- Correction - A data subject has the right to have incorrect or incomplete data corrected.
- Erasure - A data subject has the right to have personal data permanently deleted.
- Restrict - A data subject has the right to block or suppress personal data being processed or used.
- Data Portability -
What is the UK GDPR?
The UK left the EU on December 31, 2021.
After Brexit, the UK is no longer regulated domestically by the EU’s General Data Protection Regulation (GDPR), which governs processing of personal data from individuals inside the EU.
Instead, the UK now has its own version known as the UK-GDPR (United Kingdom General Data Protection Regulation).
The new UK-GDPR took effect on January 31, 2020.
What is the Data Protection Act 2018?
UK’s implementation of GDPR.
Complete data protection system, governs personal data as well as all other data previously covered within the 1998 Act.
Amended 1st January 2021 to reflect Brexit.
What is the Freedom of Information Act 2000?
Gives individuals the rights to access information held by public bodies
- Public body must tell an individual requesting information whether it holds the information.
- Required to provide the information within 20 working days.
- It can charge for the provisoin of the information
- Maximum disclosure: Freedom of information legislation should be guided by the principle of maximum disclosure
- Obligation to publish: Public bodies should be under an obligation to publish key information
- Promotion of open government: Public bodies must actively promote open government.
- Limited scope of exceptions: Exceptions should be clearly and narrowly drawn and subject to strict “harm” and “public interest” tests.
- Processes to facilitate access: Requests for information should be processed rapidly and fairly and an independent review of any refusals should be available.
- Costs: Individuals should not be deterred from making requests for information by excessive costs.
RICS documents for Data Handling?
Proposed RICS Professional Statement on Data Handling and the Prevention of Cyber Crime.
Address how surveyors collect, store and use data.
Address cyber risks posed by modern ways of working including portable devices.
When did GDPR come into force?
25th May 2018
What are the key requirements under GDPR (obligation, rights, appointment/responsibilities, accountability)?
- Obligation to conduction data protection impact assessments for high risk holding of data
- New rights for individuals to have access to information on what personal data is held and to have it erased
- A data controller decides how and why personal data is processed and is directly responsible for GDPR
- ‘Data accountability’ ensuring that organisations can prove to the Information Commissioners Office (ICO) how they comply with the new regulations
What are the exemptions from the Freedom of Information Act 2000 (protection, prejudicial circumstances (2))?
- Contrary to the GDPR requirements
- It would prejudice a criminal matter under investigation
- It would prejudice a person’s/organisation’s commercial interest
What are automated valuation models (AVMs), and when typically used?
- Software systems which can provide property valuations using mathematical modelling combined with a database
- They are most used for residential property
- By lenders for the loan origination process or subsequent revaluation for credit decision purposes�
- In-arrears assessment and planning
What are the advantages of using AVMs (data, practical benefits, lack of human interaction), and therefore useful for what particular type of asset instruction?
- Able to consider a larger number of data points than a traditional valuation approach
- Saves time, money and resources
- Removes any human bias or subjectivity
- Useful for assessing the value of a property portfolio
can be built into existing electronic valuation processing platforms, to support lower-risk lending decisions�
What are the disadvantages of using AVMs (physical, logic, data limitation)?
- Do not take into account property condition (valuation assumes an average condition as an inspection does not occur)
- Does not take into account nuanced factors such as the view or level of street noise
- Use transactional data which may lag the actual market i.e. cannot include evidence from properties which might be under offer
Lack of quantity and quality of good comparable data could lead to a valuation with a low confidence level.
What do you understand by the term security of data?
Data security is the practice of protecting digital information from unauthorized access, corruption, or theft throughout its entire lifecycle.
How can security of data be improved (E, BU, PP, AV, FW, DRP)?
- Disk encryption - encrypting data on a secure hard disk drive
- Regular back ups off site
- Password protection
- Use of anti-virus software protection
- Firewalls
- Disaster recovery procedures
Delete redundant data
What does copyright mean, what form of property are they and what 3 things can you do with them?
- A set of exclusive rights granted to the author or creator of any original work, including the right to copy
- These rights can be licensed, assigned or transferred
- Form of intellectual property
What is a deed?
A legal document made under seal
How can you prove ownership of land which is not registered with the Land Registry?
The Deeds will set out information about the ownership and details of a property
What do the Land Registry provide upon request and payment?
Copy of the official Title Register for registered property or land in the UK