Data Management

Question 1

What is the meaning of a NDA?

Answer 1

• Non disclosure agreements are used to protect against the disclosure or sharing of confidential data
• Prior to data being shared with recipients, clients will typically request that one is signed

Question 2

Who are key persons outlined within GDPR?

Answer 2

Controller - natural person who determines the purposes and means of processing the data (when employees personal data, the employer is the controller)

Processor - natural person that processes personal data on behalf of the controller

DPO - leadership role required by GDPR. Oversees data protection approach, strategy

Question 3

What are the 8 individual rights under GDPR?

Answer 3

Right to be/ of:

informed
access
rectification
erasure
resitrict processing
data portability
object
automated decision making and profiling

Question 4

What things must companies put in place to ensure GDPR compliance?

Answer 4

• Raise awareness across the business
• Audit all personal data
• Review procedures
• Identify and docuemnt your legal basis for processing personal data under GDPR
• review how you seek, obtain and record consent

Question 5

Tell me about the Freedom of Information Act 2000

Answer 5

• Gives individuals the right of access to information held by public bodies
• Supply it within 20 working days
• 2 exemptions

Question 6

Who polices GDPR?

Answer 6

Information Commissioners Office

Question 7

Fine for breaching GDPR

Answer 7

Larger of 4% Global turnover or £17.5m

Question 8

What do you need to do in a data breach?

Answer 8

Report to ICO within 72 hours where there is a risk of harm to individuals

Question 9

What is GDPR?

Answer 9

A data protection regime affecting businesses and empowering individuals to take control of how their data is used by 3rd parties

Question 10

Penalty for breaching NDA

Answer 10

Can be sued for damages for losses incurred

Question 11

Key Principles of GDPR

Answer 11

Article 5(1): Principles relating to storage of personal data:

• Processed lawfully
  Collected for specific, legitimate purposes

Kept accurate and up to date

Kept limited for what is necessary for purposes

Kept securely

Question 12

How do you keep data secure?

Answer 12

• encryption
• firewalls
• password
• backups
• cbre file transfer
• controlling access
• secure file storage