Legislation

Question 1

What is the Data Protection act (2018)

Answer 1

It is an act that controls how your personal information is used by organizations, businesses or the government

Question 2

How does the data protection act work?

Answer 2

Each person who has their data stored is known as a data subject. An employee within an organisation must be appointed as a data controller and it is they who are responsible for registering with the information commissioner

Question 3

Who is the information commissioner?

Answer 3

The information commissioner is the person in the uk who is responsible for managing several laws, Most significantly the Data protection Act

Question 4

What are the six principles of the Data Protection Act?

Answer 4

1. Data must be collected lawfully and processed fairly
2. Collected data must only be used for the reasons specified
3. Data must be relevant and not excessive
4. Data must be accurate and up to date
5. Data must not be stored for longer than necessary
6. Data must be stored and processed securely

Question 5

What is the Computer Misuse act (1990) ?

Answer 5

The computer misuse act was introduced as computers became cheaper and more common at home or work. The act attempts to stop or punish those who use computers inappropriately. Breaking any of the three principles could result in fines and a jail sentence, but only if it can be proved if it was done on purpose and not by accident

Question 6

What are the three main principles of the computer misuse act?

Answer 6

1. No unauthorised access to data
2. No unauthorised access to data that could be used for further illegal activities
3. No unauthorised modification of data like spreading a virus to change data

Question 7

Freedom of Information act (2000)

Answer 7

This act allows people to request public authorities to release information. Public authorities include local councils, government departments, universities and hospitals.
A freedom of information request must be formally submitted in a letter or email and the reply from the organisation is required within 20 days of receiving the request

Question 8

Regulation of investigatory powers Act (2000)

Answer 8

This act was introduced in response to the increase in both criminal and terrorist activities on the internet, it is used to monitor and access online communication of suspected criminals

Question 9

What happens if criminal activity is suspected by an individual?

Answer 9

If it is suspected then the act grants the following powers:

• Internet service providers ISPs must provide access to the suspects online communication, such as social media or emails
• Locked or encrypted data may be accessed such as online messages
• ISPs could install surveillance equipment or software to track the suspects online activity
• Surveillance may take place to physically track the suspect
• Access must be granted to personal information

Question 10

Copyrights, Designs and Patents Act (1988)

Answer 10

This act makes it a criminal offence to copy work that is not your own without the permission of the creator or the copyright holder. This can refer to text images music videos or software