The data protection act
1998 – deals with
personal information.
The Act refers to data
subject and the data
user.
The data subject is the person
whose personal data is stored
on a computer.
The data user is the organisation (Tax
Office, doctor/dentist, DVLA, police)
that stores the data.
The data subject has certain
rights and the data user has
certain obligations.
The Acts also defines ‘Sensitive Personal Data’
that must not be disclosed or processed
without the subject’s knowledge and
permission unless it is necessary for other
legal reasons.
Sensitive personal data
includes data about the
subject’s:
• Racial or ethnic origin
• Religious beliefs
• Physical or mental health
• Offences and convictions
• Political opinions
• Trade union membership
Some organisations
are exempt from the
Data Protection Act
They include data
collected for:
• National security
• Detection of crime
• Home use (household or
recreational)
• Calculation of wages, pensions or tax
• Advertisements
The rights of an individual given by the Data Protection Act:
• to have access in order to view the personal data stored
about them
• to have the data corrected if incorrect data is stored about them
• to be entitled to
compensation if unlawful
processing of the data leads to
damage or distress
Computer Misuse Act 1990
is a law that makes it illegal to:
• Gain unauthorised access to
files stored on a computer system,
including viewing and copying the
files
• Gain unauthorised access to files and use
them for criminal activities such as fraud or
blackmail
• Change or delete any files unless authorized to do so –
this includes creating or planting viruses
Electronic Communications Act 2000
the act was passed to:
• Set up a register if cryptographers
• Help e-commerce
• Recognize digital signatures as legal
Regulation of Investigatory Powers Act 2000
makes it illegal to intercept emails, phone calls, letters and other
communications without permission. This helps protect the individual from
the state and means that groups, such as the police, cannot eavesdrop on
conversations without special permission.
The Health and Safety at Work Act 1974
the Act makes provision:
• For securing the health , safety and welfare of people at work
• To protect others against risks to health or safety in
connection with the activities of people at the work
• To control the keeping and use of dangerous substances
• To control certain emissions into the atmosphere