There are three IT-related laws you need to know about for this course. Laws are complicated! You are not expected to have an in-depth knowledge of them, just an overview.
Data Protection Act (2018)
Overview
Protects people's personal information (like names, addresses, medical details). It tells organisations how they must collect, store, and use data fairly and safely.
The person whose data is being used is called the data subject.
The person who controls this data for a company is called the data controller.
There are six principles
Personal data must be used…
- fairly and lawfully processed
- used for specified, explicit, and legitimate purposes
- adequate, relevant, and not excessive
- accurate and up to date
- must not be kept for longer than is necessary
- stored and processed securely
Example
A school must keep student data secure and not share it without consent.
Computer Misuse Act (1990)
Overview
This law makes it illegal to access or change computer data without permission. It stops people from hacking, spreading viruses, or stealing information from someone else's system.
It also makes it illegal to use a computer system to commit further crime.
Example
Logging into someone else's account or network without permission is a crime.
Copyright, Designs & Patents Act (1988)
Overview
This law protects the original work of people and organisations, like music, videos, images, and software.
It means you can't copy, share, or sell someone's work without their permission.
This ensures that a person or industry can afford to continue to be creative, and brings huge amounts of income to the economy. Just think how much money the Harry Potter books and movies have brought into the UK!
Example
Downloading films or songs without paying for them breaks this law.