Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

APC > Data Mangement > Flashcards

Data Mangement Flashcards

(56 cards)

Start Studying
1
Q

Why is it important to consider data sources?

A

To consider the reliability and associated risks
Where possible should verify data against alternative sources through ‘triangulation’

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Why is it important data is stored safely?

A

To keep safe from corruption and control access to ensure privacy and protection
In order to comply with UK GDPR, as well as the RICS RoC and bylaws of confidentiality

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What data security technologies are there?

A

Disk Encryption - on a secure hard disk drive
Regular backups off site
Cloud storage
Password protection and anti-virus software protection
Firewalls and disaster recovery procedures

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What data security actions are undertaken in your office?

A

Password protection
firewalls
disaster recovery
Cloud storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Copyright?

A

A set of exclusive rights granted to the author or creator of any original work
Rights can be licensed, assigned or transferred

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is intellectual property?

A

intangible property that is the result of creativity, such as patents, copyrights, etc

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Crown Copyright?

A

Refers to all material created and prepared by the government eg. laws, public records, official press releases and OS Mapping

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Should you acknowledge copyright in your work?

A

Yes for any copyright information duplicated in your work

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is set out in the UK General Data Protection Regulation and the Data Protection Act, 2018?

A

Additional supplement to UK GDPR (2016) - EU no longer applies
Aims to create a single data protection regime affecting businesses and empower individuals to take control of how their data is used by third parties

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the 7 principles of GDPR?

A
  1. Data minimisation
  2. Purpose limitation
  3. Storage limitation
  4. processed fairly & lawfully
  5. Accurate & up to date
  6. Security
  7. confidentiality
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the key requirements included in the Data Protection Act 2018?

A

An obligation to conduct data protection impact assessment for high risk holding of data
Gives people rights to be informed about how their personal information is used

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is a data controller?

A

the person directly responsible for ensuring GDPR, decides how and why personal data is processed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the principle of ‘data accountability’?

A

ensuring that organisations can prove to the information commissioner’s Office (ICO) how they comply with the regulations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What should you do if there is a data security breach?

A

Must be reported within 72 hours to ICO where there is a loss of personal data and risk of harm to individuals

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the penalties for non compliance with UKGDPR?

A

fines of up to 4% of global turnover of the company or £17.5million (whichever is greater)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the principles of the UK GDPR?

A

Article 5(1) principles relating to storage of personal data
Article 5(2) requires that the ‘controller shall be responsible for compliance with the principles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How does Article 5(1) of the UK GDPR state data should be stored?

A
  • Lawfully, fairly and in a transparent manner
  • Collected for specified, explicit and legitimate purposes
  • Adequate, relevant and limited to what is necessary for purpose
  • Kept in form which permits identification of data subjects
  • Appropriate level of security
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are the 8 individual rights under UK GDPR?

A

Rectification
Erasure
Access
Data portability
Restrict processing
Automate decision making
Informed
Object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the Freedom of Information Act 2000?

A

Gives individuals the right of access to information held by public bodies
The public body must declare whether it holds info
Public body has 20 days to supply info requested
It can charge for the provision of info

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are the exemptions to the freedom of information act 2000?

A
  1. If contrary to GDPR Requirements
  2. It would prejudice a criminal investigation or a person/organisations personal interest
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How can Security of data be improved?

A

Firewalls
Encryption
Cloud-based systems
Passwords

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is a non-disclosure agreement?

A

A legally enforceable contract between 2 parties relating to sensitive information
Creates a confidential relationship

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What RICS Professional Standard has been proposed?

Study These Flashcards
A

A standard on Data Handling and Prevention of Cybercrime - covering best practice and mandatory obligations for the capture, storage and sharing of data

24
Q

What happens if an NDA is breached?

Study These Flashcards
A

The party that was harmed can take legal action to enforce the agreement and seek damages for any losses that were incurred

25
Why is it important to verify and analyse data to provide good advice?
It’s important to consider the reliability of data, and without verification of data sources you cannot guarantee accuracy, and therefore may be providing inaccurate advice
26
What databases and systems have you used?
Microsoft Excel IDAT
27
What online databases have you used?
Costar EGI Edozo Land Registry
28
What are other sources of information in addition to online databases?
Speaking to local agents Physical evidence and documentation (although usually dated) Marketing boards
29
How does a password protected data site ensure GDPR is adhered to?
It ensured data is processed in a manner that ensured appropriate security of the personal data, as per the principles of GDPR -Confidentiality (security of data) -Data minimised and purpose limited to this use only
30
What software did you use for the data site and why? Any others you could’ve used?
I have used our internal dealflow system and Thomson Reuters Data site hosting system (through BCLP lawyers). Secure and has been used several times by the lawyers previously to good effect.
31
What was the purpose of the data site?
To provide a package of information for potential purchasers for the disposal, and ensure data was kept confidential
32
What did you consider when setting up the data site?
Considered the principles of UKGDPR and the DPA, and ensured we would be able to deliver on the rights of UKGDPR e.g. right to erasure, right to access
33
How did you ensure confidentiality to the public? Did you control distribution of the data site link?
Access was granted on an individual basis after providing a name, company and email. Once the link was sent the user had to set up a password protected email. Distribution of this link was controlled and only sent out to potential purchasers who had undertaken some level of due diligence, or their agents, who we generally knew.
34
What’s the difference between UKDPR and the DPA?
* UKGDPR (2016) transcribed entirely from EU GDPR * DPA supplements UKGDPR * Certain rights under the UK GDPR, such as the right to object to and the right to data portability are not included in DPA (2018)
35
Why did you close the data site once under offer? How did this comply with GDPR?
To comply with the principle of storage limitation as per UKGDPR guidelines – the data site was closed once it had served its purpose as to hold data this personal data for only as much time is required
36
How do you comply with GDPR when dealing with mailing lists?
Ensure I comply with the principles of UK GDPR. Purpose limitation – only used for that purpose Data minimisation – only hold required information, nothing more Accuracy – updated regularly Storage limitation – information safely deleted once no longer required Integrity and confidentiality – not shared with any other parties
37
How would you securely delete data?
Delete from files, and ensure this is entirely wiped off the system – checking the recycling bin, and potentially using additionally software such as an eraser system to delete off the drive.
38
How would you deal with a data breach?
* Contain the breach * Assess the damage * Notify those affected * Investigate the cause * Take steps to further prevent further breaches
39
Are you aware of any case law in regards to data breaches? What are the fines associated with a data breach?
Halfords, 2022 – fined £30,000 by the ICO, they sent out 500,000 marketing emails about ‘fix your bike scheme without gaining customer’s consent’.
40
Difference between a data controller and data processor?
Data controller – decides how data is stored/what data/how it’s protected etc, data processor – just handles the data). Example – cbre is the controller, we are the processor.
41
When does data become information?
When it is processed, interpreted, and organized
42
How long can you keep data?
NB remember tie-in with PII and any potential future litigation Supposed to keep data for 6yrs for PI insurance etc.
43
Who is the data controller at CBRE?
CBRE Management Service Ltd
44
What data is required and held in your office?
Dependent on what department and for what use. – CBRE Data Retention Policy Investment – tracking investment market for trends and specific transactions, client details, mailing lists etc.
45
What sorts of information can a firm reasonably retain in order to comply with other laws?
As per data minimisation and purpose limitation principles of UKGDPR, information for the purpose of use only can be used, and must be removed once no longer required for that purpose. E.g. client contact details for a specific transaction.
46
Can you tell me about the retention of files and the Limitation Act 1980?
File should be kept for 6 years. The limitation Act 1980 states: * Contract – 6 years from date of negligence Tort – 6 years from the date the claimant suffered the loss
47
How do you source title information?
Land registry
48
How can you protect electronic data from viruses?
* Be aware of phishing attacks via emails * Update passwords regularly * Back up important business data
49
What does block chain mean?
Blockchain is a system of recording information in a way that makes it difficult or impossible to change, hack, or cheat the system.
50
Which records are manually kept in your office and why?
Health and safety documents
51
What is an Electronic Document Management System (EDMS)?
A document management system is a system used to receive, track, manage and store documents and reduce paper
52
Are electronic signatures accepted by the Land Registry?
Yes
53
When sending sensitive information, what are the steps you would take?
* Identify the sensitivity of the information * Choose the appropriate method of transmission – secure transfer protocols (STFP) * Rensure the recipient is authorised to receive the information * Document the transmission * Review and update security practices regularly.
54
What is data management?
This encompasses all aspects of handling data, from collection and storage to analysis and reporting.
55
56

APC (10 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions