Can you tell me three principles of UK GDPR and the Data Protection Act 2018?
Lawfulness, fairness & transparency – Data must be processed legally, fairly, and in a way that is clear to individuals (privacy notices, clear consents).
Purpose limitation – Data can only be collected for specified, explicit, and legitimate purposes, and not used for incompatible purposes.
Data minimisation – Only collect and process the minimum personal data necessary to achieve the purpose.
Accuracy – Personal data must be accurate and kept up to date; inaccuracies corrected or erased without delay.
Storage limitation – Data must not be kept longer than necessary for the purpose (e.g. 6 years under Limitation Act, 15 years for property-related matters).
Integrity & confidentiality (security principle) – Data must be processed securely, protecting against unauthorised or unlawful processing, loss, destruction, or damage (using technical and organisational measures like encryption, firewalls, and access controls).
Accountability – Organisations must not only comply, but be able to demonstrate compliance (e.g. policies, audits, training, Data Protection Impact Assessments).
How do you comply with UK GDPR and the Data Protection Act 2018 in your role?
Use mailing lists with opt-in and unsubscribe.
Retain only necessary info (e.g. 15 years for property work).
Handle personal data securely (passwords, encryption).
Complete mandatory GDPR/cyber training.
Report any breaches per ICO rules (72 hours).
Give me an example of how you process and handle confidential information.
Rent review instructions are saved in Electronic Document Management System (EDMS) with restricted access.
Shared only with authorised colleagues.
External sharing requires NDAs/ consent/ approval.
Give me an example of how you ensure that data is kept securely.
Encrypt laptop hard drives.
Use firewalls, anti-virus software, and cloud backups.
Apply role-based access and multi-factor authentication.
What do the Privacy and Electronic Communications Regulations 2003 apply to?
Electronic marketing (emails, texts, calls).
Use of cookies and online tracking.
Requires user consent for direct marketing.
What is copyright?
Exclusive right of creators to copy, use, and distribute original works (e.g. text, drawings, maps).
What is Intellectual Property?
Legal rights protecting creations of the mind, including copyright, patents, trademarks, and designs.
Can intellectual property be transferred?
Yes — it can be sold, assigned, or licensed.
What is the Freedom of Information Act 2000?
Gives the public the right to access recorded information held by public authorities within 20 working days, subject to exemptions (e.g. security, GDPR conflicts).
Can you tell me about the retention of files and the Limitation Act 1980?
Standard limitation: 6 years for most contracts. 12 years for Deeds.
Longstop: 15 years for property, trusts, and negligence claims.
Deeds and wills often kept indefinitely.
Give me an example of a property information tool.
Land Registry portal (title and index map searches).
BCIS Online (cost planning).
CoStar/EGi (market data).
Tell me about how you extract data from a source regularly used in your role.
I use our internal property database/management system.
I apply filters (e.g. property type, location, lease dates, rent review triggers), then export the data into Excel.
I clean it by removing duplicates and checking for errors, and then analyse it using pivot tables and VLOOKUP to identify trends and create reports that support decision-making.
What are the limitations of primary/secondary data sources?
Primary data – e.g. measured building surveys, site inspections, tenant interviews.
Limitations: reliable and accurate, but costly, resource-heavy, and time-consuming to collect.
Secondary data – e.g. Land Registry Price Paid Data, BCIS indices, CoStar/EGi databases.
Limitations: quicker and cheaper to access, but may be outdated, incomplete, or biased (e.g. not all transactions recorded, regional gaps, or sample bias).
How do you validate information?
Triangulate with multiple sources (e.g. Land Registry + agent confirmation + ONS data).
Cross-check with site inspection or professional judgement.
What is the difference between a deed and a registered title?
A deed is the original signed legal instrument (e.g. lease, transfer).
A registered title is the official record at Land Registry confirming ownership, boundaries, and rights.
How do you source title information?
Via the Land Registry portal (or Registers of Scotland), obtaining official copies of the register and title plan.
For unregistered land, check the Index Map to confirm registration status.
What are the differences between manual and electronic records?
Manual = paper deeds, leases, contracts; secure but harder to search, risk of physical loss.
Electronic = stored in EDMS/databases; searchable, easier to share, requires cyber security controls.
What is an index map?
A Land Registry tool that shows whether land is registered and under which title number. Used when ownership is uncertain or when dealing with unregistered land.
What does encryption mean?
Converting data into a coded format that can only be accessed with the correct key/password, protecting confidentiality.
What is a firewall?
A network security system that monitors and controls incoming/outgoing traffic, blocking unauthorised access.
How can you protect electronic data from viruses?
Use antivirus software, firewalls, email scanning, automatic updates, staff training, and restricted admin rights.
Which records are manually kept in your office and why?
Original deeds, leases, wills — because originals may be legally required (wet ink signatures) and carry evidential weight in disputes.
What is BIM and how can it be used?
Building Information Modelling – a collaborative, data-rich 3D model used across the asset lifecycle.
Supports design coordination, cost planning, lifecycle maintenance, and facilities management.
Explain the growing use of AVMs in the industry
Automated Valuation Models use algorithms and large datasets to produce instant property valuations.
Growing in mortgage lending, portfolio reviews, and mass appraisals. Benefits = speed and scale.
Risks = data quality, bias, liability.