Chapter 2 Flashcards
What is the definition of the Copyright, Design and Patents Act 1988?
This act makes it illegal to copy software, use unlicensed software or to copy images/text without permission.
What is the definition of the Data Protection Act 1998?
The Data Protection Act (DPA) was introduced to give rights to people who have data about them stored on computer systems.
What is the definition of the Electronic Commerce (EU Directive) Regulations 2002?
These regulations cover a range of on-line activities and apply to organisations that sell goods or services to consumers on the internet or by e-mail.
Why does PL need the Copyright, Design and Patents Act?
They need it for:
- Copying images/photographs (they must own all or have license to use)
- Software licensing (fully licensed and no copies are made)
- Copying text (no copying and passing it as their own)
What do these software license types mean; Single-User license?
Single-User license:
This allows the user to load this software package onto only one machine.
What do these software license types mean; Multi-User license?
Multi-User license:
Can be purchased for installation on several machines and the software can be loaded onto the leisure centre network.
What do these software license types mean; Site license?
Site license:
The software is available to everyone with network access at the same time.
What are the groups that are involved with the DPA at PL?
- Data controller (person who collects and stores personal data)
- Data subject (staff members and customers)
- Information Commissioner (ensure they stick to the law)
Personal data should be obtained and processed fairly and lawfully (DPA Principle)
Personal data is collected by PL during registration. Terms and conditions need to be available.
Personal data can be held only for specified and lawful purposes (DPA Principle)
The data controller at the leisure centre must supply details about the data that will be collected and what it will be used for when registering with the Information Commissioner.
Personal data should be adequate, relevant and not excessive for the required purpose (DPA Principle)
PL would need personal details of the customer so that they can be contacted. Date of birth will also be relevant (for membership type). It is not necessary to know sensitive information (religion or criminal record)
Personal data should be accurate and kept up to date (DPA Principle)
PL would give the customer the option to check the accuracy and update their membership details online.
Personal data should not be kept longer than necessary (DPA Principle)
If customer membership expires then their personal details should only be kept doe a reasonable time.
Personal data must be processed in accordance with rights of the data subject (DPA Principle)
PL must supply the customer with details of any data they have stored about them and they need the option to correct or update this data.
Appropriate measures must be taken against unauthorised access (DPA Principle)
PL must ensure that their system has adequate security measures in place to prevent unauthorised access of this data. It also needs to be backed up to prevent accidental loss.
