What are some examples of data security technologies? (5)
- Disk encryption (encrypting data on a secure hard disk drive)
- Regular backups offsite
- Password protection
- Use of anti-virus software protection
- Firewalls
What is a firewall?
A network security device that monitors traffic to or from your network
What is copyright?
- A set of exclusive rights granted to the author or creator of any original work, including the right to copy
- Form of intellectual property
What is triangulation?
Triangulation is the process of verifying data from multiple sources to validate any data collected
What are the individual rights under UK GDPR? (8)
- Right to be informed
- Right to access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
- Right to automated decision-making and profiling
What are the principles of the UK GDPR? (5)
Personal data must be:
- Processed lawfully, fairly, and in a transparent manner
- Collected for a specific and legitimate purpose
- Accurate and kept up to date
- Kept no longer than necessary
- Processed in a secure manner
What is the link between UK GDPR and the Data Protection Act 2018?
When the UK left the EU in 2016, it formed its own regulations, UK GDPR, which sits alongside the Data Protection Act 2018
What did the Data Protection Act 2018 replace?
Data Protection Act 1998
What is the aim of the UK GDPR/Data Protection Act 2018?
It aims to create a single data protection regime affecting businesses and empower individuals to take control of how their data is used by third parties
Who is the UK GDPR/Data Protection Act 2018 policed by?
Information Commissioner’s Office (ICO)
What can the fines be for data security breaches?
Up to 4% of global turnover of the company or £17.5 billion (whichever is greater)
What are some of the requirements of the UK GDPR/Data Protection Act 2018? (4)
- Obligation to conduct data protection impact assessments for high-risk holding of data
- Data controller decides how and why personal data is processed and is directly responsible for GDPR
- ‘Data Accountability’ ensures that organisations can prove to the ICO how they comply with the new regulations
- Data security breaches need to be reported to the ICO within 72 hours where there is a loss of personal data and a risk of harm to individuals
What is the Freedom of Information Act 2000? (2)
- Give individuals the right of access to information held by public bodies
- Public body is required to supply it within 20 working days
Are there any exemptions to the Freedom of Information Act 2000? (2)
- Contrary to GDPR requirements
- It would prejudice a criminal matter under investigation
What is a Non-Disclosure Agreement (NDA)
A legally enforceable contract between two parties relating to sensitive information
How does your office keep its data secure?
- Regular backups of the site (daily)
- Passwords change every 60 days
What is included in an NDA? (5)
- Parties
- Definition of what is deemed confidential
- Scope of confidentiality
- Exclusions of confidentiality
- Signatures
Who is bound by an NDA? Just the signatory or the whole company?
Whole company
What are the different types of data structures? (2+3+3)
Split into:
- Linear structures e.g. array, linked list, stack, and;
- Non-linear structures e.g. trees, graphs, and tries
How can you keep a confidential folder safeguarded? (3)
- Clean desk policy
- Password and encrypted files
- Label clearly what is confidential
How do you ensure accuracy in your data records? (4)
- Regular data audits
- Training and Education
- Data source verification
- Restrict the number of users
Can you give an example of any negatives you have experienced with more tech software methods of data management? (2)
- Need for skilled personnel
- Costs
Where do you store your client data?
- External hard drives
- Password-protected filing system
Does it make a difference whether a file/folder contains personal data or purely company data?
-
Weak Areas54
-
Measurement42
-
Ethics, Rules of Conduct & Professionalism68
-
Landlord & Tenant72
-
Inspection68
-
Health & Safety37
-
Valuation103
-
Purchase & Sale58
-
Data Management29
-
Leasing & Letting16
-
Accounting Principles13
-
Sustainability20
-
Case Study30
-
Other Mandatory Competencies24
-
Strategic Real Estate Consultancy8
-
Documents/Standards7
-
General Questions3
