Data Management V2

Question 1

What legislation covers data protection?

Answer 1

Data Protection Act 2018
UK GDPR

Question 2

What is the purpose of the Data Protection Act 2018?

Answer 2

To bring UK GDPR into law following Brexit and give powers to a UK regulatory body.

Question 3

What is the data protection regulatory body in the UK?

Answer 3

Information Commissioners Office

Question 4

What are the principles of the Data Protection Act 2018?

Answer 4

Lawfulness
Purpose Limitation
Data Minimisation
Accuracy
Accountability
Security
Storage Limitation

Question 5

What are the rights of the Data Protection Act 2018?

Answer 5

Right to Restrict Processing
Right to Access
Right to Data Portability
Right to be Informed
Right to Object
Right to Erasure
Right to Restrict Processing
Rights with regards to Automated Decision Making

Question 6

What are the three parties in the Data Protection Act 2018?

Answer 6

Data Subject
Data Controller
Data Processor

Question 7

What is a Data Subject?

Answer 7

Someone who’s information is collected.

Question 8

What is a Data Controller?

Answer 8

Someone who decides what information is collected.

Question 9

What is a Data Processor?

Answer 9

Someone who handles data on behalf of the Data Controller.

Question 10

What is a subject access request and what is the timeline for this?

Answer 10

Request for information about yourself, must be processed within 30 days.

Question 11

What is a Freedom of Information request?

Answer 11

A request for information held by a public body. Must be processed within 20 working days.

Question 12

What legislation covers FOI requests?

Answer 12

Freedom of Information Act 2000

Question 13

What information does not have to be provided in a FOI request?

Answer 13

Personal or sensitive information.
Information which is confidential or business sensitive.
Matters of national security.

Question 14

What is Personal Information and what is Sensitive Information?

Answer 14

Personal information is information which can be used to identify an individual.

Sensitive information is a subset of personal information requiring special care as it may cause harm i.e. medical records.

Question 15

How can you ensure that data is reliable?

Answer 15

Verify it through triangulating multiple sources.

Question 16

What types of digital security do you use?

Answer 16

Encryption
Fire Walls
Discrete filing system
Multi-factor authentication

Question 17

What physical data security do you use?

Answer 17

Clear desk policy
Key card building access
Confidential waste bins

Question 18

What is copyright?

Answer 18

The exclusive right to intellectual property including licencing and the right to make copies.

Question 19

What is intellectual property?

Answer 19

An intangible asset which is a creation of the mind such as music.

Question 20

If a data breach occurs, what would you do?

Answer 20

Inform the Data Protection Officer.

Question 21

When must a Data Protection Officer inform the ICO of a data breach?

Answer 21

Within 72 hours.

Question 22

What is the penalty for breaching the Data Protection Act 2018?

Answer 22

A fine which is the greater of 4% of turnover of £17.5m

Question 23

What is the purpose of UK GDPR

Answer 23

To give individuals greater control over their own information and how it is recorded.

Question 24

What is a Privacy Notice?

Answer 24

A document provided to data subjects outlining what data is being collected, for what purpose and their rights.

Question 25

What data security threats might you encounter?

Answer 25

Ransomware Phishing DDOS attack Insider threat - employee error Loss or theft of equipment Hacking

Question 26

Open Storage Land, Stoke-on-Trent - Why did you password protect your spreadsheet?

Answer 26

It included information of enquiring parties, including names which is personal information under UK GDPR. The offers were also commercially sensitive.

Question 27

Open Storage Land, Stoke-on-Trent - How did you advise the enquirers that you were collecting their information?

Answer 27

I requested permission via email when the enquiries were received and directed them to my firm's privacy notice.

Question 28

Golborne Point - Why did you hold digital records instead of paper records?

Answer 28

Easier to store and organise. More secure.

Question 29

Golborne Point - Why were the measurements / specifications of the unit treated so securely?

Answer 29

I have a duty to maintain the confidentiality of the instruction to my client and information gathered can be commercially sensitive. Tenant contact details is also personal information.

Question 30

Golborne Point - Why did you delete the documentation from your phone?

Answer 30

Documents protected by password and VPN but are stored on the phone's internal storage which is not as secure as my firm's servers.