Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Matt - APC > Matt - Data management - Level 1 > Flashcards

Matt - Data management - Level 1 Flashcards

1
Q

What is the Commissioners for Revenue and Customs Act (2005)?

A

It is the Act that introduced HM Revenue and Customs, and it also covers details about the role of the Valuation Office Agency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Can you list some sections of the Commissioners for Revenue and Customs Act (2005) and what they relate to?

A

Section 7 - Details how the VOA compiles and maintains Valuation Lists and Rating Lists

Section 10 - Details the list of clients that the VOA may act for such as for HMRC or other public bodies

Section 17 - Sharing of information between HMRC and VOA

Section 18 - Sharing of information outside of VOA

Section 19 - Criminal offence to disclose information that can identify an individual

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does the Commissioners for Revenue and Customs Act (2005) detail about information sharing?

A

Information sharing can only be done if it is reasonable and proportionate to do so, and there is a duty of confidentiality.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the Data Management Act (2008)?

A

Sorry, this is a mistake on my submission. I mean the Data Protection Act (2018)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the Data Protection Act (2018)?

A

This is the UK’s implementation of the General Data Protection Regulations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the purpose of the Data Protection Act (2018)?

A

It gives people the right to be informed about how their personal information is used

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the 7 data protection principles for the Data Protection Act (2018)?

A
  1. Lawfulness, fairness and transparency
  2. Legitimate interest (purpose limitation)
  3. Data minimisation (adequate, relevant and not excessive)
  4. Accurate and up to date
  5. Storage limitation (don’t keep for longer than necessary)
  6. Confidentiality
  7. Accountability
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are potential fines for data protection breaches?

A
  1. Warning
  2. Restrictions on data processing
  3. Fine of up to 4% of annual turnover of the company or £17.5m, whichever is greater
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How do you and your firm ensure that data is kept secure?

A
  1. Firewalls
  2. Strong passwords / 2FA
  3. Encryption
  4. VPNs
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What would you do if data was breached?

A
  1. Inform the Data Protection Officer within 72 hours
  2. Give as many details as possible
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the General Data Protection Regulations (2018)?

A

A europe wide law setting out how organisations need to handle personal data from May 2018

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does GDPR relate to?

A

Personal data - any information relating to an identifiable person

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What role must all firms have under GDPR?

A
  1. Controller
  2. Processor
  3. Data Protection Officer
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the 8 individual rights under GDPR?

A
  1. Right to be informed
  2. Right of access
  3. Right to rectification
  4. Right to erase
  5. Right to restrict processing
  6. Right to portability
  7. Right to object
  8. Rights in relation to automated decision making and profiling
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the 6 principles under Article 5(1) for GDPR?

A
  1. Processed lawfully and in a transparent manner
  2. Collected for specified explicit and legitimate interest
  3. Adequate, relevant and necessary
  4. Accurate and up to date
  5. Not kept longer than necessary
  6. Processed in a manner which ensures appropriate security
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How long should you hold personal data for?

A

I understand that my organisation hold it for 6+1 years

If data is contained from a contract, then it should be held for 6 years

If data is contained from a deed, then it should be held for 12 years

The longest time would be 15 years for litigation

17
Q

What is the Freedom of Information Act (2000)?

A

It is an Act which gives individuals:

  1. The right to access information held by public bodies
  2. Allows access to official information
18
Q

What is the timeframe for a Freedom of Information request and does it need to be in writing?

A

Within 20 working days of the request and yes.

19
Q

When may a Freedom of Information Request be refused?

A
  1. Contrary to GDPR
  2. Too costly or time consuming
  3. Prejudice criminal matter under investigation or a persons commercial interest
  4. Repeat request
20
Q

What is a Subject Access Request (SAR)?

A

It is a written request to a company asking for access to the personal information it holds on you.

21
Q

What are some data sources you would use to check statutory functions?

A
  1. Asbestos
  2. Flood zone
  3. EPC/MEES
  4. Land Registry
  5. Business rates
22
Q

What is the role of the Controller?

A

The role of someone that determines the purposes and means of processing the personal data

23
Q

What is the role of the Processor?

A

Someone who processes personal data on behalf of the controller

24
Q

What is the role of the Data Protection Officer?

A

A leadership role required by EU GDPR. They are responsible for the data protection approach, strategy and its implementation.

Matt - APC (38 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions