SOE Data Management

Question 1

Who enforces GDPR? Say there is a breach of data, who enforces GDPR?

Answer 1

ICO – Information Commissioners Office

Question 2

What enforcing powers do the ICO have?

Answer 2

• Conduct audit checks to check you are complying with obligations
• Serve an Enforcement Notice order if there has been a breach
• Issue Monetary penalties – fines
• Prosecute you if you fail to comply with Enforcement Notices
• Report to Parliament on issues of concern.

Question 3

What actions are undertaken at CBRE to ensure data security?

Answer 3

• Mandatory training
• CBRE File transfer systems
• Firewalls and blocked sites
• Phishing security check on emails – IT team verify if email/link is safe.
• Password protected computers – password updated every 3 months
• Email retention

Question 4

What is the UK General Data Protection Regulation (2016) and Data Protection Act 2018

Answer 4

• EU GDPR no longer applies in UK and entirely transcribed by UK GDPR.
• UK GDPR is supplemented by Data Protection Act 2018 (this replaces Data Protection Act 1998).
• It gives people right to be informed about how their personal information is used.

Question 5

What does Article 5(1) Principles in UK GDPR state?

Answer 5

Relates to storage of personal data. Data must be:
* Processed lawfully, fairly, transparent matter.
* Collected for specified and legitimate reason.
* Accurate and kept up to date.
* Kept in a form that permits identification of data for no longer than is necessary.
* Appropriate security of data – protection against unauthorised processing.

Question 6

What does Article 5(2) in UK GDPR state?

Answer 6

Controller shall be responsible for, and be able to demonstrate compliance with principles.

Question 7

What are the 8 Individual Rights under GDPR?

Answer 7

Right to:
1. Be informed
2. Access
3. Rectification
4. Erasure
5. Restrict processing
6. Data portability (use data for their own purposes)
7. Object
8. Rights to automated decision making and profiling (as undertaken by insurance companies).

Question 8

Who is Data Protection Officer at CBRE?

Answer 8

Nigel Anderson