Data Management Flashcards
What are the key requirements of Data protection act?
Conduct data protection impact assessment for high risk holding of data.
‘Data accountability’ businesses proving to ICO how they comply with regulations.
Have a ‘controller’ decides how and why personal data is processed and directly responsible for GDPR.
Report breach to ICO in 72 hours
Why was GDPR created?
Create a single data protection regime affecting businesses and empower individuals to learn how and why their data is processed by businesses.
What are your company’s compliance procedures?
All our data is in a secure filing system, only accessible by password protected computers.
When the information is no longer needed the data is removed
What are the key principles of the data protection act?
PALDASI
Purpose limitation
Accountability
Lawfulness
Data minimisation
Accuracy
Storage limitation
Integrity and Confidentiality
What are the individual rights of GDPR?
A PEAR PIO
Access
Portability
Erasure
Amend
Restrict process
Informed Consent
Object
Rectification
What databases have you used?
CoStar.
Agent Insight.
What are the limitations of these databases?
Relies on third party information, need to check the information is correct
How do you ensure the information is kept up to date?
Verify data with parties involved in the transaction.
E.g. if unit was u/o, would ask in the future if the sale was completed.
What does it mean to be GDPR compliant?
Your business’s processes are in line with GDPR.
If you collate information from various sources, how would you store this data to allow for easy analysis?
I would keep in our online filing system on a clearly name file in the appropriate project that it relates to.
How can you keep data stored securely?
On a filing system only accessible from our password protected computers.
Key Principles of Data Protection Act
Act lawfully
Limit data for purpose
Remove data when finished
Process data securely
Data Protection Act Purpose
gives people right to be informed on how their data is processed
How long can you store data?
Only as long as it is necessary to do so.
Minimum of six years.
How did you provide advice on data security?
Advised that we kept their details on secure propman system.
Advised that lease events were stored securley. Benefit of the secure storage was that we wouldn’t miss lease events.
Name another time you recommended data and security? What system?
Propman (Detail propman system, what security it provided and services)
How do you comply with UK GDPR when dealing with mailing lists?
Obtain consent from those who are to receive the marketing list.
How would you request data from a public body?
You would submit a Freedom of Information request in writing. FOI Act 2000.
How do you request your personal information from a public authority?
Subject Access Request
How long does an organisation have to respond?
Within 20 working days.
What are the exemptions to the freedom of information act?
- Contrary to GDPR requirements
- if it would prejudice a criminal matter under investigation
- Or someone’s personal information.
Why was data management storage essential when providing a reliable service?
Propman. Rent collection, RR dates, upcoming lease events
How did you verify data against another source
Triangluation. Speaking with other agents to confirm rents.
What is Copyright
Set of exclusive rights granted to author or creator of original work.
Form of intellectual property.
