click below
click below
Normal Size Small Size show me how
1.5.1
| Question | Answer |
|---|---|
| DPA | Data Protection Act (1998) Controls how personal information is used by companies + government Every UK organisation holding personal data must register with the information commissioner’s office and disclose what, why and how the data will be used |
| DPA principles | Data 1.processed fairly+lawfully 2.only used for specified purpose 3.adequate,relevant+not excessive 4.kept accurate+up to date 5.only kept if needed 6.for specific reasons 7.kept secure 8.not sent outside EU unless adequate data protection exists |
| DPA rights held by data subjects | 1.Right of subject access 2.Right of correction 3.Right to prevent distress 4.Right to prevent direct marketing 5.Right to prevent automatic decisions 6.Right of complaint to the information commissioner 7.Right to compensation |
| Data subject | has data about them stored somewhere outside their direct control |
| Data controller | Determines what data an organisation collects and how it is collected, processed and stored |
| Data commissioner | has the power to enforce DPA - an independent public body that reports directly to parliament and is appointed by the crown |
| Personal data | any data that can be used to identify you as an individual (name, address, banking details, DoB, financial transactions) |
| Sensitive data | encompasses several categories of personal data (nationality, ethnicity, political beliefs, trade union membership, genetics, biometrics, health, sexual orientation) |
| DPA exemptions | Domestic purposes: personal, family or household activity Law enforcement: national security and crime Tax collection |
| DPA protection measures | CCTV, alarms and locks Password-based protection Encrypted and backed up Firewalls |
| Computer misuse act | (1990) Makes unauthorised access to computer systems illegal |
| Computer misuse act 4 main provisions/offences | 1.Unauthorised access to computer system 2.Unauthorised access with intent to commit or facilitate further offences 3.Unauthorised access modification of data 4.Making, supplying or obtaining tools used in computer misuse offences |
| Computer misuse act Unauthorised access to computer system | Fine: up to £5,000 Prison: up to 6 months |
| Computer misuse act Unauthorised access with intent to commit or facilitate further offences | Fine: unlimited Prison: up to 5 years |
| Computer misuse act Unauthorised access modification of data | Fine: unlimited Prison: up to 5 years |
| Computer misuse act Making, supplying or obtaining tools used in computer misuse offences | Fine: unlimited Prison: up to 10 years |
| CDPA | Copyright, Design and Patents Act (1988): Protects intellectual property |
| Intellectual property | creations of the mind; protected by: copyright, patents, licensing, trademarks |
| Copyright | the rights a creator has over their own work |
| Patents | an exclusive right granted for innovation - provide owner with the right to decide if or how their invention can be used by others |
| CDPA (illegal to) | Copy the copyright holder’s work Distribute copies of the work Rent of lend copies of the work Modify the work |
| CPDA exemptions | Non-commercial research or study Text + data mining Criticism, review and reporting current events Teaching non-commercially Time shifting - live broadcasting is recorded o be relished to Peer-to-peer streaming |
| CC | an organisation that issues licensees such as - Public domain - Attribution - Attribution non-commercial |
| Public domain | no restrictions on any use |
| Attribution | work can be freely reproduced with the original creator being credited |
| Attribution non-commercial | work can only be used for non-commercial purposes |
| CDPA protection measures | Encryption to make copying harder Password control systems Time access control systems |
| RIPA | The Regulation of Investigatory Powers Act (2000): Makes provisional for digital surveillance and the interception of communications by certain public bodies |
| Surveillance | monitoring people and their actions (overt, directed, intrusive) |
| Overt surveillance | openly and without secrecy, the subjects are aware of it |
| Directed surveillance | covert but not intrusive, needs judicial approval and prior authorisation |
| Intrusive surveillance | covert but involves the presence of a device inside the subject's premises or vehicle. Is only legal for the police and law enforcement purposes |
| CDPA Grants some public bodies the right to, in appropriate circumstances | Demand ISPs provide access to communication Mass surveillance of communication Monitor internet activity Demand ISPs fit surveillance equipment Access protected information Hide data interception warrants+data collected by them in court |
| Public bodies allowed RIPA rights | District councils HM revenue and customs Government communications headquarters (GCHQ) The office for fair trading The food standards agency Police |
| ISPs | internet service providers |