Understanding the issues related to the use of information

Learning Outcomes LO1:Understand the legal issues related to the use of information LO2: Apply the Data protection Act and Computer Misuse act to real life incidents.

Starter Read the following 3 newspaper articles: http://news.bbc.co.uk/1/hi/business/7209154 .stm (M&S) http://www.bbc.co.uk/news/uk-19799329 (News of the World hacking) http://news.sky.com/story/999188/apple- fights-samsung-copyright-ruling (Apple Vs Samsung copyright) Pupils read articles- offer what each law may be

So what are they? Data Protection Act Computer Misuse Act Copyright From reading the articles pupils discuss what each of the 3 may be

Data Protection Act 1998 The Data Protection Act controls how your personal information is used by organisations, businesses or the government.[1] [1] https://www.gov.uk/data-protection/the-data-protection-act

8 Principles Data must be kept secure; Data stored must be relevant; Data stored must be kept no longer than necessary; Data stored must be kept accurate and up-to-date; 5. Data must be obtained and processed lawfully; 6. Data must be processed within the data subject rights; 7. Data must be obtained and specified for lawful purposes; 8. Data must not be transferred to countries without adequate data protection laws. Mention rights to data: you have the right to see data about yourself, right to change or block incorrect data about yourself, compensation if the principles are breeched, prevent processing if its going to cause you distress Mention Exemptions: national security, crime, taxation purposes, health education and social work, school & examinations

Sensitive Data Examples- Race Membership to a union Criminal Convictions/Offences Religious Beliefs Political Opinions What can & cant a company do?

Make sure you reference any information you use! Tasks: Describe what the Data Protection Act is Summarise the eight principles – say what each one means a business can/can’t do with information they hold on people Explain what is classed as “sensitive data” – what can/can’t a company do with this info? What types of organisations are exempt from the Act? Research some further organisations that have been in the news for breaching the Data Protection Act, summarise and look at how they are in breach of the Act Make sure you reference any information you use! Suggest teach ICT as a resource

Question: How did M&S break the Data Protection Act 1988?

Computer Misuse Act 1990 What is it? Hacking became more popular and it became apparent that legislation would be required so that hackers could be prosecuted. -Unauthorised Access to computer material -Unauthorised Access with intent to commit or facilitate a crime -Unauthorised Modification of Computer Material -Making, supplying or obtaining material that could be used in computer misuse offences

Tasks Describe what the Computer Misuse Act is Summarise the offences What are the potential penalties? Why is computer misuse a problem for organisations? Research some other infringements of the Computer Misuse Act that have made the news, summarise and look at how they are in breach of the Act Make sure you reference any information you use!

Question: How did the news of the world break the computer misuse act?