legislation

Question 1

DPA

Answer 1

• Data Protection Act
• determines what organisations can do with the personal data they have collected
• also defines the rights of the individual over the data that is stored about them

Question 2

8 principles of the DPA

Answer 2

1) data must be used and processed in a fair and lawful way
2) data must only be used for the stated purpose
3) data must be adequate, relevant and not excessive
4) data must be relevant and kept up-to-date
5) data should not be kept longer than necessary
6) data should only be used according to the rights of the data subject
7) data should be kept safe and secure
8) data must not be transferred to organisations within countries that do not offer a similar level of protection

Question 3

year DPA introduced

Answer 3

1998

Question 4

DPA update

Answer 4

• Data Protection Act 2018 is an updated data protection law, that brings the EU GDPR to UK law
• requires companies to run a GDPR audit

Question 5

Computer Misuse Act

Answer 5

• introduced in 1990
• to protect against hacking and cybercrime
• consists of three offences

Question 6

3 Computer Misuse Act offences

Answer 6

1) unauthorised access to a computer
2) unauthorised access with intent of committing further offences
3) unauthorised modification
illegal to modify or destroy a computer system, software or data without authorisation
e.g. creating malware

Question 7

Copyright Designs and Patents Act

Answer 7

• introduced in 1988
• protects the use of intellectual property
• automatically applies to any original creative work

Question 8

4 things the Copyright Designs and Patents Act makes illegal

Answer 8

1) make copies of copyrighted material
2) share copyrighted material
3) use unlicensed software
4) plagiarise someone’s creative work

Question 9

Regulation of Investigatory Powers Act (RIPA)

Answer 9

• ## introduced in 2000