1. Law Additional Exercise ANSWERS

2. Question #1 (a) Any one of: gain unauthorised access (1st) to computer material (1) gain (unauthorised) access to computer material (1) with the intent to commit further offences (1) carry out unauthorised (1) modification of computer material (1) gain (unauthorised) access to computer systems (1) to facilitate denial of services (1) 2 marks each to max 2 [2] (b) An explanation that includes two of: hackers can now be prosecuted (1) if they attempt to access a computer system (1) they do not need to be in this country (1) providing the targeted computer system is (1) people who spread viruses can be prosecuted (1) if they intend to modify the content of a computer system (1) this does not have to be directed at a specific computer (1) or a specific program or data (1) 2 marks each to max 4 Do not accept Act stops hacking and viruses [4]

3. Question #2 (a) (i) Electronic Communications Act (2000) [1] (ii) It makes electronic signatures legally binding [1] (b) Can be confident about encryption services used (1) encryption keeps customers’ personal and financial data secure (1) because the providers of encryption services can be approved (1) and entered in a register (1) currently this is self-regulated (1) but Act provides fallback to a statutory scheme if necessary (1) 1 mark per point to max of 3 [3]

4. Question #3 (a) The Data Protection Act/DPA (1998) [1] (b) Any two of appoint a data controller (1st) who determines how and for what purpose data will be used (1) apply to the Information (Data Protection) Commissioner (1st) to be added to the register (1) put security measures in place (1st) to protect the personal data (1) check accuracy of data (1) and update if necessary (1) delete data (1st ) that is no longer required (1) Up to 2 marks per point to max of 4 NB: Actions are required, not a statement of the 8 principles [4]

5. Question #4 (a) Copyright, Designs and Patents Act CAO [1] (b) Makes Logos R Us the owner of the designs (1) Only Logos R Us may legally copy, adapt and sell the designs (1) Other people need permission to use the designs (1) Logos R Us may charge (1) Logos R Us can sue anyone who uses the designs (1) without permission (1)[3]

6. Question #5 Any two of analyse workstations to assess/reduce risk (1st) eg look at furniture/equipment/ working environment/job being done/needs of individual (1) ensure workstations meet minimum requirement (1st) eg adjustabl chairs/suitable lighting/tilt and swivel monitors/sufficient workspace (1) plan employees work (1) so there are breaks or changes in activity / allow set breaks (1) arrange eye tests on request (1) provide spectacles if special ones needed (1) provide health and safety training (1st) on how to use workstations safely (1) give information about health and safety using VDUs to employees (1st) including steps taken to comply with regulations (1) NB: Question asks for actions. Up to two marks each to max 4 [4]

7. Question #6 (a) Any two of: taking reasonable care of their own health and safety (1) and that of others (1) co-operating with the employer (1) on health and safety matters (1) using work items provided, including personal protective equipment, correctly (1) and in accordance with any training or instructions (1) not interfering with or misusing (1) anything provided for their health, safety or welfare (1). 2 mark each to max 4 [4] (b) To ensure that the working environment is as safe as possible (1) for workers (and the general public) (1) (c) A description including carry out an assessment of the health and safety risks implement any health and safety measures found necessary by the risk assessment keep a record of any significant findings of the risk assessment keep a record of the health and safety measures implemented (if there are 5 or more employees) draw up a health and safety policy bring health and safety policy to the attention of the employees (if there are more than 5) appoint competent people to help implement health and safety arrangements set up emergency procedures provide clear information and training to employees co-operate with other employers who share the same workplace. 1 mark per point to max 4 [4]