1.5 Legal, Moral, Cultural, and Ethical Issues Flashcards
What does GDPR stand for?
General Data Protection Regulation
What is GDPR?
Seeks to ensure data protection and privacy for people
Regulates how companies and organisations may collect, hold and use personal data
What does DPA stand for?
Data Protection Act 2018
What is DPA?
Controls the way data about living people is stored and processed, relating to all people that develop, use or maintain systems that use or store personal data
What are the eight principle of DPA?
Storage and processing of personal data must:
- be fairly and lawfully processed
- not be transferred to other countries outside of the European Economic Area that don’t have adequate data protection
- be adequate, relevant and not excessive
- be accurate and kept up-to-date
- not be kept longer than is necessary
- be kept secure
- be processed for limited purposes
- be processed in line with your rights
What do individuals have the right to, according to DPA?
How their data is being used
Access their personal data
Have incorrect data erased
Stop or restrict the processing of their data
Restrict the portability of their data, or sharing with third parties
Object to how their data is processed in certain circumstances
What would be considered sensitive data?
Race
Ethnic background
Political opinions
Religious beliefs
Trade union membership
Genetics
Biometrics (where used for identification)
Health
Sexual orientation
What is personal data?
Any information about a living individual, facts (name, address) and opinions, to allow the individual to be identified
Who is the data subject?
The person the data is being stored about
Who is the data user?
The person who needs to access or use the data as part of their job
Who is the data controller?
The person who needs to apply for permission to collect and store the data
Decide what data needs to be collected and what it will be used for
What does ICO stand for?
Information Commissioner’s Office
What is the ICO?
Independent authority set up to uphold information rights in the public interests, promoting openness by public bodies and data privacy for individuals
Who are information commissioners?
Enforces DPA and who organisations need to apply to in order to gain permission to collect and store data
Make general public aware of their rights under DPA
Who is the data protection officer?
Responsible for data protection laws being followed within the organisation
Individual has the right to find out the data being stored about them by the government or an organisation using this law by writing to DPO
How quickly should a data request be processed?
Within 1 month (longer if the request is complex or multiple)
When does a organisation not have to provide the data?
Prevention, detection or investigation of a crime
National security of armed forces
Assessment or collection of tax
Judicial or ministerial appointments
Then data doesn’t need to be shared and reason doesn’t have to be given
What does CMA stand for?
Computer Misuse Act 1990
What is the CMA?
Makes it an offence to access or modify computer material without permission
Seen regular amendments and updates to keep up with actions by cyber criminals
Makes it illegal for anyone to break into a computer system, or to change programs or data without permission
Attempts to break into a computer system are illegal even if they are not succesful
What are the sections of CMA?
- unauthorised access to a computer
- unauthorised access to a computer in order to commit or facilitate another offence
- unauthorised acts that impair, or could impair, the operation of a computer
3A. making or supplying tools that can be used in computer misuse offence
3ZA. unauthorised acts causing, or creating a risk of, serious damage
What does RIPA stand for?
Regulation of Investigatory Powers Act 2000
What is RIPA?
Regulates surveillance and investigation, covers interception of communication
States responsibility of ISP, social media platforms and telecoms companies in monitoring communications
Lays out powers that the police and government have when investigating possible criminal offence
What has RIPA been referred to as?
Snooping charter - by people who believe it is an invasion of privacy
Why was RIPA needed?
Growth in internet communications
What does RIPA allow?
Demand ISPs provide access to a customer’s communication
Prevent existence of such interception activities being revealed in court
Allow mass surveillance of communications
Allow monitoring of an individual’s internet activities
Demand access be granted to protected information
Demand ISPs fit equipment to facilitate surveillance
What does CDPA stand for?
Copyright, Design and Patents Act 1988
What is CDPA?
Covers copying or use of other people’s work
Allows an individual or organisation that has created a piece of original work that right to control the use of their work
Does the CDPA apply to digital or non-digital content?
Both
What works are covered by CDPA?
Literary works
Dramatic works
Musical works
Artistic works
Typographical works
Sound recordings
Films
What is copyright?
Used to protect an original piece of work
What is a patent?
Used to protect the design of a product
What is a trademark?
Used to protect indications of the commercial source of the product (logo or name of an organisation)
What is piracy?
Unauthorised use or reproduction of another’s work
Illegally copying movies, music etc, breaking the CDPA
What are licences?
Different types of licences can be purchased for computer software
Give the user different permissions