1. Data Protection Act

2. Need;
DPA Questions x13
Bite size Video
Poster DPA
Flash Cards

3. Riddle – What am I?
What can you hold without ever touching or using your hands?
Your breath.
Clue

4. Today’s Lesson.. Data Protection Act (1998) What Data is stored?
Watch a short video;
Gain information;
Create a poster;
Present the poster to the class.

5. Data protection Act (1998)
Unit 3 – L.O 2: Understand the issues related to the use of information.
P3 – Explain the issues related to the use of information.
M2 – Assess how issues related to the use of information affect an organisation.

6. Who stores data about you?

7. Information stored by kitchen staff
Name
Finger print
Date of birth
School year
Home address
Home phone number
Money left on your account
What’s good about using finger prints?

8. Fast access to your information
Benefits
Drawbacks
Fast access to your information
Needs a database to hold the information
They know your history
Information must be regularly updated or it could be wrong
There is less risk of things being missed or mistakes being made
Needs employees to actually input the information
Your account balance can be updated quickly
Needs security measures to be in place
You don’t have to remember your information

9. Data Protection Act (1998)
What is the Data Protection Act (1998) and why was it created?
What are the eight principles of the Data Protection Act?
Data Protection Act: What rights do we have?
What is an Information Commissioner, Data Controller and Data Subject?
Are there any exemptions to the Data Protection Act?

10. Bite size video

11. Data Protection Act (1998) What is it and why was it created?
The Data Protection Act (DPA) is a law designed to protect personal data stored on computers or in an organised paper filing system.
It was created to protect individuals from misuse of this data.

12. Data Protection Act (1998) What are the eight principles of it?
Data must be kept secure;
Data stored must be relevant;
Data stored must be kept no longer than necessary;
Data stored must be kept accurate and up-to-date;
5. Data must be obtained and processed lawfully;
6. Data must be processed within the data subject rights;
7. Data must be obtained and specified for lawful purposes;
8. Data must not be transferred to countries without adequate data protection laws.

13. Data Protection Act (1998)
What is an Information Commissioner, Data Controller and Data Subject?
Information Commissioner: Person who has the power to enforce the Act.
Data Controller: Person or Company that collects and keeps data about people.
Data Subject: Person who has data about them stored outside their direct control.

14. Data Protection Act (1998) What rights do we have as data subjects?
To be supplied with the data held about us;
To change incorrect data;
To prevent data being used about us if it will cause distress;
To stop data being used in attempts to sell us something;
To use the law to gain compensation.

15. Types of Personal data
Some data and information stored on a computer is personal and needs to be kept confidential.
People want to keep their pay, bank details, and medical records private and away from the view of just anybody.
If someone who is not entitled to see these details can obtain access without permission it is unauthorised access.
The Data Protection Act sets up rules to prevent this happening.

16. Types of Personal data
Personal data is about living people and could be
Sensitive data is also about living people, but it includes one or more details of a data subject's
Their name
Racial or ethnic origin
Address
Political opinions
Medical details
Religion
Banking details
Membership of a trade union
Health
Criminal activity

17. Data Protection Act (1998)
Are there any exemptions to the Data Protection Act?
Any data held for National Security reasons e.g. MI5
Police can access personal information in order to solve crimes.
The taxman can access personal information to ensure people pay their tax!
Any data held for domestic purposes at home e.g. birthday lists, address books.

18. Registration with the Information Commissioner
Any organisation or person who needs to store personal information must apply to register with the Information Commissioner.
Data controllers must declare what information will be stored and how it will be used in advance. This is recorded in the register.

19. Each entry in the register contains:
The data controller's name and address.
A description of the information to be stored.
What they are going to use the information for.
Whether the data controller plans to pass on the information to other people or organisations.
Whether the data controller will transfer the information outside the UK.
Details of how the data controller will keep the information safe and secure

20. Data Protection PPT – Slides 3+5

22. Task – DPA (1998)
Using the notes you have made; create a poster targeted at ICT pupils aged 14 – 16. A4
Use Bold for important words
Different fonts.
Large text
Easy to read
Have a theme
Make the important information clear!
Add images

23. Plenary
Flash Cards