Data Management

Question 1

How do you demonstrate Accountability in terms of data protection

Answer 1

demonstrate compliance with data protection laws.

Question 2

What is the right to erasure?

Answer 2

The right for individuals to request deletion of their personal data under certain conditions.

Question 3

List some of the principles of data processing under the Act.

Answer 3

Data must be processed lawfully, fairly, and transparently.
Data minimisation
Storage limitation
Purpose limitation
Accuracy
Accountability
Security (integrity and confidentiality)

Question 4

What are the 8 rights under DPA 2018

Answer 4

Access
Objection
Rectification
Automated decision making.
Informed of datas existence
Data Portability
Erasure
Restrict Processing

Question 5

Rights under Freedom of Information act.

Answer 5

Right to Access
Right to Information
Right to confirmation
No justification needed for request
Public access
Right to review

Question 6

Time frames for FOI request

Answer 6

20 working days

Question 7

What is your understanding of confidentiality

Answer 7

Information that can only be shared with permission.

Question 8

What is meta data?

Answer 8

Data embedded within documents or photos. Need to be aware of meta data when sharing documents.

Question 9

Benefits of cloud based storage

Answer 9

Backed up on encrypted servers
Accessibility is managed via online settings
Environmentally friendly.
Synchronous documents

Question 10

Information barrier - how would this work in practice?

Answer 10

Make client aware of risks
Keep a physical and digital barrier between two teams..
Secure document storage

Question 11

Key persons in GDPR?

Answer 11

Data Controller - determines means of processing personal data. Employer
Data Processor - person that processes personal data. Eg. Call centre
Data Protection Officer - Leadership role. Responsible for overseeing approach strategy and implementation

Question 12

What is in Section 10 of CRCA 2005?

Answer 12

Valuation Services: An officer of Revenue and Customs may provide a valuation of property under this section for HMRC purposes, or at the request of a public authority.

Question 13

What does CRCA stand for

Answer 13

Commissioners for Revenue and Customs Act (2005)

Question 14

What Sections of CRCA are important for VOA

Answer 14

Sec 10 - defines specific roles and functions of VO
Sec 17 - info for one function can be used for another VOA function.
Most important Sec 18 - confidentiality except for disclosure when performing statutory functions, for criminal investigation or when permission given
Sec 19 - wrongful disclosure is punishable by jail.
Sec 23 - with hold identifiable info.

Question 15

Who would you report a breach of DPA to? And how long do you have to do it.

Answer 15

To IOC. Information Commissioners Office within 72 hours

Question 16

The VO asks for data from Ratepayers on FORs. What is their authority to do this.

Answer 16

Under Sched 9 of 1988 LGFA the VO can request information that they reasonably believe will assist them.

Question 17

Explain the Right in DPA around automated decision making

Answer 17

Right to have a human review decision.

Question 18

What is a Subject Access Request

Answer 18

Under the Data Protection Act 2018 (DPA 2018) and UK GDPR, individuals have the right to request a copy of their personal data from organizations (a Subject Access Request or SAR). Organizations must respond within one month, free of charge, and provide data securely. The DPA 2018 ensures you can ask for data to be confirmed, accessed, and corrected.