17. Ethical, Moral

Question 1

What are the principles of the DPA?

Answer 1

The DPA requires personal data to be:

• Processed lawfully,fairly and in a transparent manner
• Collected for a specified, explicit and legitimate purposes
• Adequate,relevant and limited to what is necessary
• Kept in a form which permits identification
• Processed in a manner that ensures appropriate security of the personal data

Question 2

What are the individual rights of the DPA?

Answer 2

The right to be informed – Individuals have the right to be informed about the collection and use of their personal data.

The right of access – Individuals have the right to access their personal data.

The right to correction –Individuals have the right to have inaccurate personal data corrected or completed

The right to erasure – The right for indivudals to have personal data erased.

The right to restrict processing – Individuals have the right, in certain circumstances, to request the restriction of their personal data.

The right to data portability – The right to data portability allows individuals to obtain and reuse their data across different services

The right to object – The DPA gives individual the right to object to the processing of their personal data

Rights in relation to automated decision making and profiling – The DPA has provisions for making a decision solely by automated means, without human involvement

Question 3

What’s the penalties of the DPA?

Answer 3

Warnings and reprimands. compliance orders. bans on processing or data transfers (permanent or temporary)

Question 4

What is the Computer Misuse Act 1990?

Answer 4

The Act makes it an offence to:

• access data without permission, e.g. looking at someone else’s files
• access computer systems without permission, e.g. hacking
• alter data stored on a computer system without permission e.g. writing a virus that deliberately deletes data

Question 5

What is the Regulation of Investigatory Powers Act 2000?

Answer 5

The Regulation of Investigatory Powers Act (RIPA) 2000 is an Act that regulates the powers of public bodies to carry out surveillance and investigation. It also regulates the interception of communications.

The aim of allowing certain organisations to intercept communications is to

• prevent or detect crimes
• prevent public disorder from occurring
• ensure national security and the safety of the
  general public
• investigate or detect any abnormal or illegal
  use of telecommunication systems

Question 6

Freedom of Information

Answer 6

Any public authority is required to respond to requests from the public for information about how they operate and spend public money.