1.5.1 - Computer Legislation

Define data user

The person who needs access to or use of the data as part of their job

Define personal data

Any information about a living individual, such as, name, address, and opinions, that may allow the individual to be identified.

Define data subject

The person the data is being stored about

Define data controller

The person who needs to apply for permission to collect and store data. They decide what data needs to be collected, what it can be used for, and how.

Define information commissioner

The person who enforces the DPA and who originations need to apply to in order to gain permission to collect and store personal data. They los make the general public aware of their rights under DPA

What are the 8 key features of DPA?

1. Data must be processed fairly

2. Data collected must be relevant and not excessive

3. Data collected must be accurate and up to date

4. Data must not be retained for longer than necessary

5. Data can only be used for the purpose for which it was collected

6. Data must be kept securely

7. Data must be processed in accordance with people’s rights

8. Data must not be transferred to countries without adequate protection laws

What is a subject access request?

Yo can ask an organisation whether they are using or storing your personal information, and ask for copies of the information.

Companies are given a set timeframe (usually 30 days) to provide the information, or they are violating the law.

What does CMA stand for?

The Computer Misuse Act

What does CMA protect against?

• Spreading/ creating a virus

• Attempting to login without authorisation

• The unauthorised modification of data

• The unauthorised deletion of data

• Performing a DDoS attack

What are the 5 sections of CMA?

Section 1 = unauthorised access to computer material

Section 2 = unauthorised access with the attempt to commit further crimes

Section 3 = unauthorised access with the intent to impair, or impairing a computer system with recklessness

Section 3ZA = unauthorised access causing, or creating the risk of serious damage

Section 3A = making, supplying, or obtaining articles for use in offence under the CMA

How do content creators protect their work?

Through the copyright of intellectual property such as art, literature etc. under the Copyright Design and Patents Act.

What are the 3 key features of CDPA?

1. Regulates the IP of creators, including things like books, music, videos, and software etc.

2. No other parties are allowed to reproduce or redistribute the work without permission from the owner.

3. IP is protected for up to 70 years after the death of the author or composer and 50 years for computer generated works, and broadcasts.

Define intellectual property

Creations of the human mind, such as inventions, literature, artistic works, designs, symbols, names, and images used in commerce.

What is Digital Rights Management?

A set of technologies, policies, and tools used by copyright holders and content creators used to control how users access, copy, modify, or share digital content.

What is RIPA and what is it used for?

The Regulation of Investigatory Powers Act.

1. For national security

2. For preventing crime or disorder

3. For the interests of economic wellbeing

4. In the interests of public security

5. To protect public health

6. To collect and tac, duty, or payable charge

Define a public body

Any organisation that acts for the public

Define an ISP

Internet service provider, that supplies you with internet e.g. BT

What 6 actions can be carried out under RIPA?

1. Demanding that ISPs provide access to customers digital communications, without informing the customer

2. Carrying out mass surveillance of digital communications

3. Demanding that ISPs fit equipment to allow for digital surveillance

4. Demanding that someone hands over keys to encrypted information

5. Intercepting and monitoring digital ongoing communication

6. Keeping secret any interception warrants and data collected

What is a Section 49 Notice?

A formal, written requirement to provide access to digital devices by providing a PIN, password, or encryption key.

If you do not comply, you can be prosecuted under Section 53 of RIPA

What are the 3 key facts about the Freedom of Information Act (FOI)?

1. Anyone, anywhere in the world, can request recorded information such as emails, letters, reports, or recordings.

2. Requesters do not need to explain why they want the information, and applicants cannot ask.

3. The organisation must provide the information, or a response within 20 working days.