What is the Freedom of Information Act
UK law that gives the public a general right of access to recorded information held by public authorities (such as government departments, local councils, schools, and the NHS
What is a Subject Data Request?
allows an individual to obtain their personal information held by an organisation upon request.
How is your data backed up - is it stored remotely in a cloud
What legislation do you adhere to when handling data?
UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Give 3 principles of the Data Protection ACT
Lawfulness, fairness, and transparency: Data must be processed legally, in a way that is not detrimental or misleading to the individual, and with clear information provided about its use Information Commissioner’s Office.
Purpose limitation: Data should only be collected for specified, explicit, and legitimate purposes and not used for unrelated or secondary purposes Information Commissioner’s Office.
Data minimisation: Only the minimum amount of personal data necessary for the intended purpose should be collected and processed Information Commissioner’s Office.
What are the General Data Protection Regulations?
a comprehensive EU law (now also UK law, as UK GDPR) that protects the personal data and privacy of individuals within the European Union
What is copyright?
Copyright is legal right that protects the use of your work once your idea has been physically expressed.
What is intellectual property and can it be transferred?
tangible creations of the mind—such as inventions, designs, brand names, and artistic works—protected by law through patents, copyrights, trademarks, and trade secrets.
they can be transferred
Tell me about the Retention of Files and Limitation Act 1980
Legislation effectively determining how long businesses should retain files to defend potential claims. Generally, it requires keeping records for six years for contract and tort claims, and 12 years for deed
How do you comply with UK GDPR and the Data Protection Act 2018 in your role?
Firewalls, password, encryption, secure devise, back up data, two-step verification.
Give me an example of how you process and handle confidential information.
Personal data from public consultations – held in a secure file location.
Technical data – held on a central project data base
What are the penalties for breach of GDPR?
Tier 1 – for less severe violations, capped at £8.5m or 2% of the annual turnover, whichever is greater.
Tier 2 – for severe violations, capped at £17.5m or 4% of the annual turnover, whichever is greater.
What would you do if there was a data breach in the office? Who would you report it to and how long do you have to report it?
You might not need to report it (if It does not meet the threshold for reporting) but it is a good idea to start a log anyway, to record what happened, who is involved and what you’re doing about it.
Can you share information obtained from Land Registry?
Yes, this is a publicly accessible source of data, so others could obtain this as well if they went directly to Land Registry.
What data do you need to be aware of?
Personal data – data that relates to an identified or identifiable individuals. Could be as simple as a name, IP address, address, date of birth, etc.
This is applicable to me when collecting responses to public engagement consultation exercises.
What is a AVM? Why are they used?
Automates valuation model. It combines mathematical modelling and a database to provide property valuations.
Speed and Efficiency, cost effective and reduce fraud risk
What is the purpose of GDPR?
Provide data protection rights to individuals.
Who does GDPR apply to?
Data controllers and processors.
What data is affected by GDPR?
The GDPR forms part of the data protection regime in the UK, together with the new Data Protection Act 2018 (DPA 2018).
Holding data of UK residents largely unchanged, but dealing with EU is now different.
The GDPR applies to ‘controllers’ and ‘processors’. A controller determines the purposes and means of processing personal data. A processor is responsible for processing personal data on behalf of a controller.
You must identify valid grounds under the GDPR (known as a ‘lawful basis’) for collecting and using personal data limited to what is necessary – you do not hold more than you need for that purpose.
You must not keep personal data for longer than you need it
What do you understand to be personal data?
Personal data – data that relates to an identified or identifiable individuals. Could be as simple as a name, IP address, address, date of birth, etc.
This is applicable to me when collecting responses to public engagement consultation exercises.
If you inadvertently left your laptop with sensitive clients’ information on a train what steps would you take in house and with your client?
Immediately notify my IT department.
Report to the police.
Notify my client of the incident and what my IT department has done to encrypt the data, etc.
Explain the Freedom of Information Act and how that may affect you and any data you hold?
Freedom of Information Act, 2000. The Act gives everyone a legal right to see information held by public bodies (elected members, council employees, any person handling data on behalf of the council including consultants, volunteers, contractors and suppliers).
Council can refuse to provide information if:
* it would cost too much or take too much staff time to deal with the request
* the request is vexatious
* repeat request
* meets an exemption under the Act (e.g. court proceedings, information provided in confidence, health and safety, commercial interests)
* the request for information constitutes personal data about its employees
The Information Commissioner’s Office (ICO) is responsible for regulating and enforcing the Act.
Because the organisation that I work for holds information on behalf of a public body, data I hold could be subject to a Freedom of Information Request.
Give me an example of a property information tool.
Land in sight
Tell me about how you extract data from a source regularly used in your role
Land in sight - average prices /£sqft
-
ETHICS131
-
FC RICS questions45
-
Inclusive Environments20
-
Client Care33
-
Communication and Negotiation26
-
Health and Safety31
-
Diversity, Inclusion and Teamworking24
-
Sustainability49
-
Business Planning14
-
Conflict Resolution39
-
DATA30
-
Accounting46
-
Planning50
-
Masterplanning30
-
Measurement20
-
Mapping18
-
Legal20
-
Risk20
-
Project Finance16
-
Briefs32
-
Valuation38
-
Appraisal32
