U10 - LEGISLATION Flashcards
8 PRINCIPLES OF THE DATA PROTECTION ACT
TRANSPARENT AND LAWFUL - User must know what they are giving permissions for
PURPOSE LIMITATION - Data can only be used for specified purpose
DATA MINIMISATION - Only request relevant data
ACCURACY - Data shall be kept up to date and accurate
DATA CAN ONLY BE RETAINED WHILST RELEVANT
INTEGRITY AND CONFIDENTIALITY - Data must be kept safe from unauthorised destruction
ACCOUNTABILITY - Responsible for data if lost
DATA SHOULD NOT BE TRANSFERRED OUTSIDE OF EUROPE
WHAT YEAR WAS DPA ?
2018
WHAT ARE THE OTHER FIVE LEGISLATION ?
THE COPYRIGHTS, DESIGNS AND PATENTS ACT (1988)
ELECTRONIC COMMUNICATIONS ACT (2000)
REGULATION OF INVESTIGATORY POWERS ACT (2000)
FREEDOM OF INFORMATION ACT (2000)
FREEDOM OF INFORMATION ACT (2000)
Provides public access to information held by authorities
Members of the public to request access to information
Information can be refused with a valid reason.
COMPUTER MISUSE ACT (1990)
Gain unauthorised access to a computer system
Viewing, copying, editing, deleting files without permission
Access without permission = 6 months or £5,000 fine
Access with intent to commit another crime = 5 years AND unlimited fine
ELECTRONIC COMMUNICATIONS ACT (2000)
Electronic signatures are legal
REGULATION OF INVESTIGATORY POWERS ACT (2000)
Police require permission from a court before intercepting communications