What is the Freedom of Information Act?
UK Legislation that gives individuals the right of access to information held by public bodies
What is a Subject Data Request?
A request made by an individual to access the personal data an organisation holds about them under the Data Protection ACT 2018
How is your data backed up - is it stored remotely in a cloud?
At Mileway, we use Microsoft One Drive to store our data. OneDrive is a cloud based storage system.
What legislation do you adhere to when handling data?
Data Protection Act 2018 and GDPR
What are the General Data Protection Regulations?
Sets out seven key principles for how personal data must be handled and protected
What is copyright?
A set of exclusive rights granted to the author or creator of any original work, including the right to copy
What is intellectual property and can it be transferred?
Refers to the creation of the mind such as reports that are legally protected and can be transferred through assignment or licenced
Tell me about the Retention of Files and Limitation Act 1980
File retention is influenced by the Limitation Act 1980, which sets time limits for legal claims. Contract and negligence claims are generally limited to six years, although latent damage claims may arise up to fifteen years after the event
What is the Data Protection Act 2018?
Uk legislation that governs how person data is collected, processed, stored and protected.
What are the seven principles of GDPR?
- Lawfulness, Fairness and Transparency
- Purpose Limitation
- Data Minimisation
- Accuracy
- Storage Limitation
- Integrity and Confidentiality (Security)
- Accountability
What are the 8 individual rights under GDPR?
Right to be:
* Informed
* Access
* Rectification
* Erasure
* Restrict processing
* Data portability
* Object
* Automated decision making and profiling
What are the fines for non-compliance with GDPR?
- Policed by the Information Commissioners Office * Up to 4% of global turnover or £17.5m whichever is greater
What do you need to do if you have a data breach?
Notify the Information Commissioners Office (ICO) within 72 hours of the breach occuring
How do you keep clients information secure?
• Cloud based storage • Password protected documents • Clear desk policy • Lock computer when away from desk
How did you verify the reliability of comparable evidence sourced from databases such as CoStar and EGI?
I used the triangulation method, and spoke to the agents who dealt with the transaction to confirm the details held on these data bases.
Why was it important to contact agents directly to confirm transaction details, and what key information did you seek to verify?
To ensure that the comparable evidence details were correct, I asked them to confirm the key lease terms.
How did you ensure that the comparable evidence you relied upon was truly comparable to the subject property?
By verifying the details
What adjustments did you typically consider when analysing comparable lettings or investment transactions?
• Location • Specification • Size • Lease terms
Why was it important to ensure compliance with GDPR when handling transactional data, and how did you apply Article 5(1) principles in practice?
To protect individuals’ personal information and ensure it is processed lawfully and securely.
I applied Article 5(1) principles by ensuring data was used:
* For legitimate purposes
* Limited to what was necessary
*Stored securely
* Retained in line with my firms policies
How did you analyse arrears data to identify emerging risks to your client’s income stream?
I analysed collection rate stats, to identify where tenants starting to become later with payments.
Why was it important to track month-on-month arrears movements rather than reviewing arrears in isolation?
Because this showed trends in time over a specific moment in time
What steps did you take to ensure sensitive financial information was handled securely and in line with data protection requirements?
I ensured that the data was held in a password protected file which only the property management and client team could access.
How long can you hold client data for?
Typically 6 years or as long as you admiratively need to hold it
f you encounter a data breach, how quickly should the data subject be notified?
As soon as possible
