Data management - level 1

Question 1

Why is good data management important in construction projects?

Answer 1

• it supports project efficiency because domecuments are easily located
• it protects sensitivity and confidentiality when documents are strored appropriately
• it helps accurate decisions and project developed because the correct data is being used for project activities
• it helps future audits or lessons learned because the data is well filed.

Question 2

What is document control?

Answer 2

• it is the process of managaing storing and updating projects appropriately to ensure the information is
  -readily available
• up to date and correct
• secured as required

Question 3

What risks arise from poor data management?

Answer 3

• using incorrect information that can lead to errors or disputes
• confidentiality breaches
• legal non-compliance
• project delays when the right information cannot be sourced.

Question 4

How do you ensure confidentiality of project information?

Answer 4

• i ensure access is restricted to thecorrect individuals
• i follow organisation policy and label documents accordingly

Question 5

What are security clearance policies?

Why are they important?

Answer 5

• they define the level of sensitivity and and who is authorised to access certain information based on their clearance level.
• They protect sensitive information and ensure compliance with organisational and legal requirement
• different levels may apply for different aspect and stages of the project.

Question 6

What is a Non-Disclosure Agreement (NDA)?

Answer 6

• A contractual agreement preventing parties from sharing confidential information.
• usually between a company and employees

Question 7

What is the Official Secrets Act 1989?

Answer 7

• A UK law that protects sensitive government information from unauthorised disclosure.

Question 8

What is the difference between and NDA and the Official Secrets Act 1989?

Answer 8

• NDAs are civil contracts between the signed parties and may only last a specific period of time.
• The OSA is a crimilar law to protect estate security, applies to all those who work for the government and work wtih sensitive information, it is life binding and can apply to family members of the individuals.
• breaching NDAs leads to civil lawsuits, whereas breaching the OSA is a criminal act, that can lead to imprisonment.

Question 9

What is GDPR?

Answer 9

• Is a legislation and legal framework governing how personal data is collected, processed, and stored.

Question 10

What is personal data?

what isn’t personal data?

Answer 10

• Any information that can identify a living individual, such as names or contact details.
• Information that has been permanently and irreversibly stripped of all identifiers so the person can no longer be identified. General information about companies or public authorities, e.g., a business’s registered office address.

Question 11

What are key principles of GDPR?

Answer 11

1- Lawfulness & Transparency: Have a legal reason for using data and be honest about it.

2- Purpose Limitation: Only use data for the specific reason you collected it.

3- Data Minimisation: Only collect the data you actually need—nothing extra.

4- Accuracy: Keep information correct and up to date.

5- Storage Limitation: Delete data as soon as you no longer need it.

6- Security: Keep data safe from hackers, leaks, or accidental loss.

7- Accountability: Be able to prove you are following all these rules.

Question 12

What are the risks of non-compliance?

Answer 12

• severe fines linked to company turnover
• legal action for compensation
• reputation damage
• regulators may ban you from processing personal data again

Question 13

What are information barriers?

Answer 13

• are policies and technical controls used to restrict access to sensitive information and data between individuals or teams within an organization.
• They prevent conflicts of interest and protect confidential data

Question 14

When would you use them?

Answer 14

• When managing confidential or commercially sensitive information across different stakeholders.
• to avoid or mitigate conflicts of interest.

Question 15

What other data management controls are used?

Answer 15

• Access permissions
• password secure document systems
• version control processes.

Question 16

What is a document control process

Answer 16

the systematic process of managing, tracking, and organizing multiple iterations of a document throughout its lifecycle to ensure accuracy and auditability

Key Aspects of the Process
Agreed Version Numbering:
Centralized Storage: Storing documents in one place (e.g., SharePoint, Google Drive, Document Management System) to avoid fragmented versions.
Audit Trail: Maintaining a history of modifications for accountability and compliance, including the author, date, and nature of changes.
Check-in/Check-out: Locking documents while in use to prevent overwriting someone else’s work.

Question 17

How do you manage sensitive project data?

Answer 17

• ensure that documents and information is only shared with the correct individuals
• i clearly lable my emails with the correct sensitivity labale
• i use secure systems to store the documents, no personal memory sticks or saving to folders where it can be deleted or easily accessed.

Question 18

What would you do if data was shared incorrectly?

Answer 18

• i would escalate it to my manager and report to a security officer as a security breach, detailing the nature of of the breach and what documents were involved.

Question 19

How do you ensure version control of documents?

Answer 19

• By maintaining a document register
• ensuring only approved versions are used.

Question 20

What is the difference between confidential and personal data?

Answer 20

Confidential data relates to sensitive project or commercial information,

while personal data relates to information about living individuals.

Question 21

Is all project data covered by GDPR?

Answer 21

No, only personal data relating to individuals.

Question 22

Who is responsible for data protection?

Answer 22

All individuals handling data have responsibility, supported by organisational policies.