ICT Legislation  Copyright, Designs and Patents Act (1988);  Computer Misuse Act (1990);  Health and Safety at Work Act (1974);  EU Health and Safety Directives;  Electronic Communications Act (2000);  Data Protection Act (1998).

Copyright, Design and patents Act (1988) – covers illegal copying  Using software without permission  Software piracy  Illegally downloading material from the internet

When you buy software, you buy a licence for it too  Single-user licence  Multi-user licence  Network licence  Site licence Different licences cost different amounts. You’re likely to pay a lot more for a 30-user licence than a single-user one.

The Computer Misuse Act (1990)  Hacking  Computer Fraud  Access or damage to data  3 Offences...

Level 1 Offence:  Unauthorised access to computer material – e.g. ‘hacking’ and piracy.  This means viewing data you are not permitted to see, or illegally copying programs.  The Maximum penalty is 6 months in jail or a maximum fine of £5000, or both.

Level 2 Offence:  Unauthorised access with intent to cause a further offence – e.g. Fraud and blackmail  This means gaining unauthorised access with the intention of committing a more serious crime (one that would get you a jail sentence of at least 5 years).  The Maximum penalty for this is 5 years in jail and maybe a fine too.

Level 3 Offence:  Unauthorised changing or deleing of files – e.g. Planting a virus.  This means modifying or deleting the content of any computer with intent to cause damage to programs and / or data (including deliberately introducing a virus).  This can get you a fine and up to 5 years in jail.

The electronic Communications Act Covers Communication and Data Storage  The 2000 Electronic Communications Act (ECA) was passed as the UK government wanted “to make the UK the best place in the world for e-commerce” and to “Create a legal framework so that people can be sure about the origin and integrity of communications”.  Two Main Points  Cryptography Service Providers  Facilitation of Electronic Commerce, Data Storage

Also...  The government also wanted people to feel secure that any electronic documentation or electronic contacts were genuine and legally binding as those on paper. Where money is involved, businesses need to be confident that documents transmitted electronically such as orders or invoices are genuine and have not been altered in anyway. They also need to feel secure that others cannot access any confidential or personal information transmitted electronically.

Health & Safety at work Act (1974) The steps that employers must take include:  Carrying out an assessment of the health and safety risks.  Making arrangements to implement any health and safety measures found necessary by the risk assessment.  Keeping a record of any significant findings of the risk assessment and the arrangements implemented as a result (if there are 5 or more employees)  Drawing up a health and safety policy and bringing it to the attention of the employees (if there are more then 5)

Health & Safety at work Act (1974) cont...  Appointing competent people to help implement health and safety arrangements  Setting up emergency procedures  Providing clear information and training to employees  Co-operating with other employers who share the same work place.

Employees also have legal duties These include:  Taking reasonable care of their own health and safety and that of others  Co-operating with the employer on health and safety  Using work items providing protective equipment, correctly and in accordance with any training or instructions  Not interfering or misusing anything provided for their health, safety or welfare

EU Health and Safety Directives; There are a number of things that the employer must do to comply with these regulations. 1. Analyse workstations to assess and reduce risk. This includes looking after equipment, furniture and the working environment, as well as the job being done and any special needs of the individual members or staff. 2. Ensure workstations meet minimum requirements. This includes the provisions of adjustable chairs and suitable lighting as well as tilt and swirl monitors, and sufficient workspace. These minimum requirements are detailed in the regulations.

3. Plan the employees’ work so that there are breaks and changes in activity. The regulations do not specify how long or how often these should occur but do explain that, for example, short frequent breaks are better then less frequent, longer ones. 4. On request, arrange eye tests and provide spectacles if special ones are needed. Employees covered by the regulations can ask their employer to arrange and pay for an eye test. This can be repeated at regular intervals as recommended by the optician. However, the employer has to pay for spectacles only if special ones are needed. 5. Provide health and safety training and information. Employers must ensure that employees can use their workstations safety, for example by providing training in the best use of the equipment to avoid health problems. They must also give information to employees about health and safety using VDUs, including the steps they have taken to comply with the regulations.

Data Protection Act Mini Site - Theory  ict.com/as_a2/topics/data_protection_act/data_protecti on/index.htm ict.com/as_a2/topics/data_protection_act/data_protecti on/index.htm Questions  ict.com/gcse/theory/dpa/student/s_dpa_examq.htm ict.com/gcse/theory/dpa/student/s_dpa_examq.htm