Data Management (L1M) Flashcards

Question 1

Q

What is GDPR?

Answer

A

Covers UK General Data Protection Regulation (UK GDPR), tailored by the Data Protection Act 2018.
GDPR came in in 2018 Data Protection Act (Data Protection Act is UK’s implementation of GDPR).
For DPOs and others who have day-to-day responsibility for data protection.
BNP - Shaun Spaulding

Question 2

Q

What are the 8 Individual Rights under GDPR?

Answer

A

Right to be informed
Right to access
Right to rectification
Right to erasure
Right to restrict processing
Right to data portability
Right to object
Right to not be subject to automated decision-making/profiling

Question 3

Q

What are the key GDPR requirements for companies?

Answer

A

Data Protection Impact assessment for high risk data
Data Protection Officer
Data accountability
Breaches (of personal data and risk of harm) - report within 72 hours

Question 4

Q

What are the principles of GDPR?

Answer

A

Lawful
Legitimate
Limited
Accurate
Confidential
Secure

Question 5

Q

What are the GDPR penalties?

Answer

A

Written warning
Maximum fine of 20 million euros or 4% of annual global turnover – whichever is greater – for infringements
Reputational risk

Question 6

Q

What is the Freedom of Information Act 2000?

Answer

A

Gives individuals the right to access information held by public bodies:
Requests:
1. Public body says whether they hold the information
2. Public body supplies information within 20 working days
3. Data must be in format requested
4. You can be charged

Question 7

Q

What methods are there for securing data?

Answer

A

Digital:

Disk encryption
Off-site backups
Password protection (change every 60 days)
Anti-virus software
Firewalls
2 point authentication system (phones and emails)
Don’t use USB or personal email with anyone

Physical:

Locked in filing cabinet
Clear desk policy

Question 8

Q

What is copyright?

Answer

A

Exclusive rights granted to creator of any work
A form of intellectual property
Can be licensed, assigned or transferred

*Crown Copyright - material prepared by Government

Question 9

Q

When and where do data security breaches need to be reported to?

Answer

A

• Data security breaches need to be reported to Information Commissioner’s Office within 72 hours

Question 10

Q

Freedom of Information Act during your job?

Answer

A

Gives individuals the right of access to information held by public bodies
If you were doing work for a public body

Question 11

Q

What is an NDA?

Answer

A

Legal agreement between 2 parties not to share confidential material
Sued for damages that was inflicted after sharing the information

Question 12

Q

What are the 8 principles of Data Protection (Data Protection Act 2018)?

Answer

A

PLACARDS:

Processed fairly & lawfully
Not kept longer than necessary
Adequate and not excessive
Not transferred to Countries without same data security
Accurate & up to date
Relevant
Data subjects rights
Securely kept

Question 13

Q

Who is the Data Protection Act 2018/GDPR policed by?

Answer

A

The Information Commissioners Office

Question 14

Q

What is an Automated Valuation model?

Answer

A

Software systems that can provide valuations using mathematical modelling
Mostly used for resi
Argus - weaknesses - loss of control, full detail cannot be seen.

Question 15

Q

What information is contained in title registers (Land Reg)?

Answer

A

Ownership information
Tenure
Price paid (if after 2000)
Title Plan
Restrictive covenant - something that restricts the use of the land

Question 16

Q

What is a deed?

Answer

Study These Flashcards

A

A legal document made under seal
For land not registered with Land Registry, proof of ownership is by production of Deeds, which sets out info about the ownership and details of the property.

Question 17

Q

When do data security breaches need to be reported?

Answer

Study These Flashcards

A

Data breaches need to be reported to Information Commissioners Officers (ICO) within 72 hours where there is a loss of personal data and a risk to harm to individuals.