Protecting Data: Legislation And Codes Of Practice - Content

Question 1

What are the two main data protection laws

Answer 1

Data Protection Act 2018

Computer Misuse Act 1990

Question 2

What is the role of the Data Protection Act?

Answer 2

.
It is the main UK legislation for protection of personal data.
• Protects the privacy of individuals’ personal data held by others.
• Gives rights to individuals on what data is collected and how their data is used.

Question 3

What is impact does the Data Protection Act have on organisations?

Answer 3

• Increased costs to meet requirements for data security.
• Limited in how much data can be gathered and how it is used.
• Fines of up to £17 million if in breach of the law.

Question 4

What are the impacts of the Data Protection Act for individuals?

Answer 4

• Personal data collected by others is likely to be kept secure and not be misused.
• Compensation can be claimed for any harm caused due to misuse of an individual’s data.

Question 5

What is the role of the Computer Misuse Act?

Answer 5

• Protects against attacks on IT systems used to gain unauthorised access and steal or cause damage to data.
• Covers threats like hacking and spreading malware.

Question 6

What are the impacts of the Computer Misuse Act for organisations?

Answer 6

• Organisations’ computer systems are more secure due to the deterrent of legal repercussions for attacks on systems.
• Requires organisations to develop and adhere to effective security policies.

Question 7

What are the impacts of the Computer Misuse Act for individuals?

Answer 7

• Provides protection from attacks to an individual’s computer systems.
• Those who carry out attacks can face unlimited fines and up to 10 years in prison.

Question 8

What does the Information Commissioner’s Office do?

Answer 8

They define codes of practice for how organisations handle, share and protect data.

Question 9

What are the aims of codes of practice?

Answer 9

• help support compliance with the Data Protection Act ,Computer Misuse Act and other related legislation.
• ensure data is not mishandled, which would lead to a negative impact on an organisation’s reputation
• give individuals confidence that the data they supply to organisations will be safe.