Data Management L1

Question 1

What is CRCA, what does it apply to?

Answer 1

• Commisoners for Revenue and Customs Act (2005)
• Applies to HMRC officers and provides a duty to confidentiality
• Also sets out criminal penatlies for wrongful disclosure

Question 2

How does CRCA 2005 apply to you work?

Talk Sections

Answer 2

• S.10 - Confirms who we can advise for example public authorties, HMRC, advice for the greater public good
• S.17 Allows the exchange of infomation between HMRC and VOA
• S.18 Allows the sharing of NECESSARY AND PROPORTIONAL infomation externally inline with our statuotry fuction such as discussing RALDS
• S.19 Makes it criminal offence to disclose infomation that could identify an indiviusal unless covered by S.18

Question 3

What is the Freedom of Infomation Act 2000 and when can a request be rejected?

Answer 3

Gives the right to request infomation held by public authorites who must resposond within 20 days

Request can be rejected if:
* Related to criminal matter under investigation
* Too costly
* Request is vexatious
* Request is a repeat
* Contray to GDPR

Question 4

What is the Data Protection Act 2018?

Answer 4

• UK’s implementation of the General Data Protection Regulation 2016 (GDPR)
• Complete data protect system – as well as governing personal data covered by GDPR, it covers all other general data as previously covered by the 1998 Act

Question 5

What is GDPR?

Answer 5

General Data Protection Regulations effecttive from May 2018

GDPR controls how personal data is used by organisations.

Aims to create a single data protection regime for anyone doing business in the EU and to empower individuals to take control of how their data is used by third parties

There are 7 principle and 8 personal rights.

Question 7

What are the principles of GDPR?

Answer 7

There are 7 principles of GDPR
1. Lawfullness, fairness and transparency
2. Accuracy
3. Data Limitation
4. Process Limitation
5. Accountablity
6. Storage Limitation
7. Security

Question 8

What personal rights are there under GDPR?

Answer 8

There are 8 personal right under GDPR. You have the right to:
1. Access
1. Objection
1. Rectification
1. Automated Decsion Making
1. Informed
1. Data portability
1. Eraser
1. Restriction

Question 9

What is “personal data” as defined by GDPR?

Answer 9

Personal data is any information which is related to an identified person e.g. the telephone number, email address

Question 10

What happens if you breach GDPR? What is the penalty?

Answer 10

20Data security breaches need to be reported to Information Commissioners Office (ICO) within 72 hours where there is a loss of personal data and a risk of harm to individuals
An increase in fines up to 4% global turnover of the company or EURO 20M (whichever is the greater)
Policed by the ICO

Question 11

How does yoru firm comply with GDPR?

Answer 11

• Ensure staff training
• firewall and use of secure VPN
• Proactive approach with password rotation and automatic data eraser

Question 12

What are the elements of a Non-Disclosure Agreement (NDA)?

Answer 12

• Identification of the parties
• Definition of what is deemed to be confidential
• Scope of the confidentiality obligation
• The exclusions from confidential treatment
• The length of term of the agreement

Question 13

What does copy right mean?

Answer 13

• A set of exclusive rights granted to the author or creator of any original work, including the right to copy
• These rights can be licensed, assigned or transferred
• Form of intellectual property

Question 14

What does Crown Copyright cover?

Answer 14

All materials created and prepared by the Government, such as laws, public records, official press releases and OS mapping

Question 15

What is a deed? How can it prove ownership of land?

Answer 15

A legal document made under seal. The Deeds will set out information about the ownership and details of a property.

Question 16

What does the colour coding on Title Plans represent?

Answer 16

Red Line – boundary of registered land
Green Line – boundary of land removed from title
Green Shading – land excluded from the title but within area
Blue shading – right of way on registered land for use by other land
Orange shading – right of way on other land for use by registered land

Question 17

What are the principles of GDPR?

Answer 17

1. Lawfulness, fairness and tranparency
2. Accuracy
3. Data minimisation
4. Process Limitation
5. Accountabiliy
6. Storage Limiation
7. Security