Chapter 9: Security of Data

Chapter 9: Security of Data

1. Data Protection Act 1998

   • Provides rules that people or organisations must follow if storing other peoples' information. It's main purpose is to protect the privacy of an individual so as private information cannot be given or sold to businesses without consent. It also gives the individual to look at the data and check it is correct, as well as make any amendments. They must register their use for the data and be fined if they do not do so.

2. Data Controller

   • A person who collects or keeps information about people.

3. Data Subject

   • A person who has data stored about themselves by other people or organisations.

4. The Eight Principles of the Data Protection Act

   • 1. Data must be obtained and kept within the law. The DC must ask the DS for permission to use the data. 2. The DC must only use the data for the purpose he asked permission for. 3. The data must be relevant and not excessive. 4. The data must be accurate and kept up to date. 5. The data shouldn't be kept for longer than necessary. 6. The DS must be allowedto look at the data and it must kept in accordance to his rights. 7. The data must be kept securely. 8. Data can only be used within the EU unless other countries have similar data laws.

5. Encryption

   • Coding sensitive data or files, using specifically designed software before they are sent over a network.

6. Firewalls

   • Software designed to allow or deny access to people who are attempting to access a system, based on a set of rules.

7. Virus and protection

   • Software that has been created to damage a computer system - up to date anti virus software to prevent corruption.

8. Passwords

   • Used to authenticate the user and allow them access onto the system.

9. Screen Savers

   • Type of computer program that prevents phosphur burn-in. Also stops people seeing open files as they walk past.