Data Management

Question 1

What is your understanding of the term Confidentiality?

Answer 1

Where information is provided but is subject to confidence and not shared without permission.

Question 2

What is your understanding of the term Meta Data and why is this important?

Answer 2

• Meta Data is information about a specific piece of data.
• We must ensure that this Meta Data is afforded the same level of care as all other confidential data.

Question 3

What is your understanding of Intellectual Property and Copyright?

Answer 3

• This is the right to control the use and ownership of original works.
• Work generally created by an employee usually belongs to their employer unless copyrights are put in place.

Question 4

What is the Freedom of Information Act 2000?

Answer 4

• This is the primary piece of UK legislation that controls the access to official information.
• The act permits the public right of access to information held by public authorities.

Question 5

What are the benefits of cloud-based storage systems?

Answer 5

• Information is backed up securely on encrypted servers.
• Cloud systems are environmentally friendly.
• Multiple users can access the same documents.

Question 6

What is the meaning of a non-disclosure agreement?

Answer 6

• Non-disclosure agreements are used to protect against the disclosure or sharing of any confidential data.
• Prior to the confidential data being share with a recipient, clients will typically request that the recipient signs up to an NDA.

Question 7

What is the Data Protection Act 2018?

Answer 7

• The act replaces previous 1998 legislation and manages how personal data is processed by organisations and the government.
• It is the UK legislation for the implementation of the EU General Data Protection Regulations (GDPR).

Question 8

What are the key Principles of the Data Protection Act 2018?

Answer 8

• Used fairly, lawfully and transparently.
• Used in a way that is adequate, relevant and limited to only the purpose it is intended.
• Is retained for no longer than is necessary.

Question 9

What are a person’s rights under the Data Protection Act?

Answer 9

o To be informed about how their data is being used.
o The right to access their data.
o The right to have incorrect information updated.
o To have their data erased.
o To stop or restrict the processing of their data.
o To object to the use of their data.

Question 10

Who are the key persons outlined within GDPR?

Answer 10

Controller
o The controller is the natural person or legal entity that determines the purposes and means of the processing of personal data.

Processor
o A natural person or legal entity that processes personal data on behalf of the controller

Data Protection Officer (DPO)
o The Data Protection Officer is a leadership role required by EU GDPR.

Question 11

What are the 8 individual rights under GDPR?

Answer 11

 The right to be informed.
 The right of access.
 The right of rectification.
 The right to erasure.
 The right to restrict processing.
 The right to data portability.
 The right to object.
 Rights of automated decision making and profiling.

Question 12

What different sources of information do you use in your day-to-day surveying?

Answer 12

 RICS Guidance Notes.
 Contract Documentation.
 Previous Tenders.
 Cost Plans.
 Valuation data.
 Industry Journals.
 Specialist sub-contractor information

Question 13

How do you manage confidential sources of information to
ensure compliance with the legislation?

Answer 13

• If signed up to an NDA with a client I ensure complete confidentiality and am not able to talk about these projects with colleagues who are not party to the project.
• I am always sure to lock my computer when away from my desk and comply with my firms IT security policies

Question 14

How do companies ensure compliance with the Data
Protection legislation generally?

Answer 14

• They should only retain data they need to perform their day-to-day operations.
• They should hold the data securely.
• They should also keep the information up to date and delete information they no longer need.

Question 15

What is GDPR?

Answer 15

• GDPR stands for General Data Protection Regulation.
• It is a European Union (EU) law that came into effect on 25th May 2018.
• GDPR governs the way in which we can use, process, and store personal data

Question 16

What are the main components of GDPR?

Answer 16

Lawfulness, fairness and transparency.
Purpose limitation.
Data minimisation.
Accuracy.
Storage limitation.
Integrity and confidentiality (security)
Accountability.