Chapter 7 Cont...

Chapter 7 Cont...

1. Data Protection Act (1998)

   • 6 Main Rights
     • Subject access
     • Prevent processing likely to cause damage or distress
     • Prevent processing for direct marketing
     • Relating to automated decision making
     • Compensation is damage/distress is caused
     • Block, erase, rectify incorrect data
   • Protect individuals from organisations
   • 8 Principles
     • Processed fairly and lawfully
     • Only obtained for specified and lawful purposes
     • Adequate, relevant
     • Accurate, up-to-date
     • Not kept for longer than necessary
     • Processed in line with rights
     • Kept secure
     • Not be transferred outside EU

2. Computer Misuse Act (1990)

   • Unauthorized access to computer material
   • Unauthorized access with intent to commit further offences
   • Unauthorized acts with intent to impair operation of a computer
   • Making, supplying or obtaining articles for use in computer misuse offences

3. Copyright, Designs and Patents Act (1988)

   • Makes it illegal to steal or create unauthorized copies of software
   • Covers manuals, books, CDs and music

4. Combating ICT crime

   • Physical Methods
     • Security guards
     • Automatic door that responds to a pass
     • Locked rooms
   • Logical Methods
     • Access rights
     • Usernames and passwords
     • Firewalls

5. Freedom of Information Act (2000)

   • Access to official documentation
   • Applies to all public authorities
   • Allows anyone to make a request for information
   • 20 working days to comply with request

6. Electronic Communications Act (2000)

   • Cryptography service providers - this allows the government to set up a register
   • Facilitation of electronic commerce data storage - recognizes digital signatures

7. Regulation of Investigatory Powers Act (2000)

   • Address concerns about the use and misuse of communication interception techniques by public and private organisations
   • Lawful interception of telecommunications and postal and digital communications
   • Criminal offence to monitor communications without lawful authority