Data Management (Level 1) Flashcards

(38 cards)

1
Q

Can you tell me three principles of UK GDPR and the Data Protection Act 2018?

A

Lawfulness, fairness & transparency – Data must be processed legally, fairly, and in a way that is clear to individuals (privacy notices, clear consents).

Purpose limitation – Data can only be collected for specified, explicit, and legitimate purposes, and not used for incompatible purposes.

Data minimisation – Only collect and process the minimum personal data necessary to achieve the purpose.

Accuracy – Personal data must be accurate and kept up to date; inaccuracies corrected or erased without delay.

Storage limitation – Data must not be kept longer than necessary for the purpose (e.g. 6 years under Limitation Act, 15 years for property-related matters).

Integrity & confidentiality (security principle) – Data must be processed securely, protecting against unauthorised or unlawful processing, loss, destruction, or damage (using technical and organisational measures like encryption, firewalls, and access controls).

Accountability – Organisations must not only comply, but be able to demonstrate compliance (e.g. policies, audits, training, Data Protection Impact Assessments).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How do you comply with UK GDPR and the Data Protection Act 2018 in your role?

A

Use mailing lists with opt-in and unsubscribe.

Retain only necessary info (e.g. 15 years for property work).

Handle personal data securely (passwords, encryption).

Complete mandatory GDPR/cyber training.

Report any breaches per ICO rules (72 hours).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Give me an example of how you process and handle confidential information.

A

Rent review instructions are saved in Electronic Document Management System (EDMS) with restricted access.

Shared only with authorised colleagues.

External sharing requires NDAs/ consent/ approval.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Give me an example of how you ensure that data is kept securely.

A

Encrypt laptop hard drives.

Use firewalls, anti-virus software, and cloud backups.

Apply role-based access and multi-factor authentication.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What do the Privacy and Electronic Communications Regulations 2003 apply to?

A

Electronic marketing (emails, texts, calls).

Use of cookies and online tracking.

Requires user consent for direct marketing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is copyright?

A

Exclusive right of creators to copy, use, and distribute original works (e.g. text, drawings, maps).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Intellectual Property?

A

Legal rights protecting creations of the mind, including copyright, patents, trademarks, and designs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Can intellectual property be transferred?

A

Yes — it can be sold, assigned, or licensed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the Freedom of Information Act 2000?

A

Gives the public the right to access recorded information held by public authorities within 20 working days, subject to exemptions (e.g. security, GDPR conflicts).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Can you tell me about the retention of files and the Limitation Act 1980?

A

Standard limitation: 6 years for most contracts. 12 years for Deeds.

Longstop: 15 years for property, trusts, and negligence claims.

Deeds and wills often kept indefinitely.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Give me an example of a property information tool.

A

Land Registry portal (title and index map searches).

BCIS Online (cost planning).

CoStar/EGi (market data).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Tell me about how you extract data from a source regularly used in your role.

A

I use our internal property database/management system.

I apply filters (e.g. property type, location, lease dates, rent review triggers), then export the data into Excel.

I clean it by removing duplicates and checking for errors, and then analyse it using pivot tables and VLOOKUP to identify trends and create reports that support decision-making.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the limitations of primary/secondary data sources?

A

Primary data – e.g. measured building surveys, site inspections, tenant interviews.

Limitations: reliable and accurate, but costly, resource-heavy, and time-consuming to collect.

Secondary data – e.g. Land Registry Price Paid Data, BCIS indices, CoStar/EGi databases.

Limitations: quicker and cheaper to access, but may be outdated, incomplete, or biased (e.g. not all transactions recorded, regional gaps, or sample bias).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How do you validate information?

A

Triangulate with multiple sources (e.g. Land Registry + agent confirmation + ONS data).

Cross-check with site inspection or professional judgement.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the difference between a deed and a registered title?

A

A deed is the original signed legal instrument (e.g. lease, transfer).

A registered title is the official record at Land Registry confirming ownership, boundaries, and rights.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How do you source title information?

A

Via the Land Registry portal (or Registers of Scotland), obtaining official copies of the register and title plan.

For unregistered land, check the Index Map to confirm registration status.

17
Q

What are the differences between manual and electronic records?

A

Manual = paper deeds, leases, contracts; secure but harder to search, risk of physical loss.

Electronic = stored in EDMS/databases; searchable, easier to share, requires cyber security controls.

18
Q

What is an index map?

A

A Land Registry tool that shows whether land is registered and under which title number. Used when ownership is uncertain or when dealing with unregistered land.

19
Q

What does encryption mean?

A

Converting data into a coded format that can only be accessed with the correct key/password, protecting confidentiality.

20
Q

What is a firewall?

A

A network security system that monitors and controls incoming/outgoing traffic, blocking unauthorised access.

21
Q

How can you protect electronic data from viruses?

A

Use antivirus software, firewalls, email scanning, automatic updates, staff training, and restricted admin rights.

22
Q

Which records are manually kept in your office and why?

A

Original deeds, leases, wills — because originals may be legally required (wet ink signatures) and carry evidential weight in disputes.

23
Q

What is BIM and how can it be used?

A

Building Information Modelling – a collaborative, data-rich 3D model used across the asset lifecycle.

Supports design coordination, cost planning, lifecycle maintenance, and facilities management.

24
Q

Explain the growing use of AVMs in the industry

A

Automated Valuation Models use algorithms and large datasets to produce instant property valuations.

Growing in mortgage lending, portfolio reviews, and mass appraisals. Benefits = speed and scale.

Risks = data quality, bias, liability.

25
What AVMs are you aware of?
CoreLogic, Hometrack, Zoopla Pro, Rightmove AVM, lender in-house models.
26
What is ISO 9001?
An international standard for quality management systems, ensuring consistent processes, customer focus, and continual improvement.
27
What are the requirements of ISO 9001?
Documented processes, leadership commitment, risk-based thinking, regular audits, and evidence of continual improvement.
28
What does ISO 27001 relate to?
An international standard for information security management – risk assessments, access controls, monitoring, and continuous improvement.
29
Why is quality management important?
Ensures consistent service delivery, improves client confidence, reduces errors/liability, and supports compliance with standards (e.g. RICS).
30
What is an Electronic Document Management System (EDMS)?
A digital system for organising, storing, retrieving, and controlling access to documents. Provides metadata, version control, audit trails
31
What do you understand by the Civil Evidence Act 1995?
It allows electronic records to be admissible in UK courts, provided authenticity and reliability can be demonstrated.
32
Are electronic signatures accepted by the Land Registry?
Yes – HM Land Registry accepts qualified electronic signatures for many deeds since 2020, though some registrable dispositions may still require wet signatures.
33
What type of documents can electronic signatures be used for?
Many contracts, leases, and transfer deeds; but not all legal instruments (e.g. some mortgages, powers of attorney still require wet ink).
34
What is data redundancy?
Storing duplicate data (e.g. backups, mirrored servers) to ensure availability and prevent loss if the primary copy is corrupted or lost.
35
What is VLOOKUP used for?
An Excel function that searches for a value in one column and returns related data from another column – useful for matching addresses to rent or sale prices.
36
What is a pivot table?
An Excel tool that summarises and analyses large datasets quickly, allowing you to group, filter, and calculate totals/averages across categories (e.g. rent by region).
37
What is the new RICS professional standard on AI?
It is the Responsible Use of Artificial Intelligence in Surveying Practice standard (Sept 2025, effective March 2026). It sets mandatory requirements and good practice for how RICS members and regulated firms procure, use, and oversee AI systems. The focus is on responsible adoption, client transparency, risk management, and ensuring professional judgement is always applied alongside AI outputs.
38
What baseline knowledge must surveyors have when using AI?
Surveyors must understand: The different types and subsets of AI and their limitations/failure modes. The risk of erroneous or biased outputs. Data usage and privacy risks when training or using AI systems. That professional scepticism, oversight, and record-keeping remain essential whenever AI materially impacts service delivery.