Legal Requirments

Question 1

Data Protection Act 1998

Answer 1

The Data Protection Act governs the way in which organisations collect, process and store private data. There are eight key principles:

• Data should be processed fairly and lawfully.
• Personal data can only be obtained for clearly stated purposes.
• The amount of data collected and stored should not be more than required.
• Personal data should be accurate.
• Personal data should only be used for the purpose for which it was collected.
• Personal data should only be processed within the rights of the data subject.
• Personal data should be protected from theft or unlawful access.
• Personal data cannot be transferred to anywhere outside of the EU unless the country to which it is being transferred has the same level of legal protection for data as set by the DPA.

Question 2

Regulation Of Investigatory Power 2000 (RIPA)

Answer 2

This Act covers the power of public bodies to carry out investigations and surveillance. This includes surveillance of communications.

Question 3

Protection of Freedoms Act 2012

Answer 3

This is a wide reaching Act that ranges from strengthening the Freedom of Information Act through to how DNA, fingerprints and footprints should be stored, handled and destroyed.

Question 4

Privacy and Electronic Communications Regulations 2003

Answer 4

This Act governs the ways organisations can use electronic communications to contact customers. The core theme is privacy, including the right to be able to relax without interruption at home, so for example, not being bothered by unsolicited emails or phone calls.

Question 5

Freedom of Information Act 2000

Answer 5

This Act provides the public with the ‘right to access’ information about the activities carried out by public authorities. As a general rule, the Act defines public authorities as organisations that are funded by the state. However, charities, for example, are exempt.

Question 6

Computer Misuse Act 1990

This Act

Answer 6

covers hacking, specifically:

• unauthorised access to computer material
• unauthorised access to computer systems with intent to commit another offence
• unauthorised modification of computer material.

Question 7

Copyright, Designs and Patents Act 1988

Answer 7

This Act provides the person who created a piece of art or music, or who designed or invented a particular technology, with control over what they have created as well as restricting the rights of others to use it.

Question 8

Equality Act (EQA) 2011

Answer 8

The Equality Act of 2011 combined a number of previous Acts into one overall Act intended to protect UK citizens from being discriminated against. As well as bringing other Acts into one overall Act, it also strengthened some protections that had already existed.