Data Protection
Who Knows What About Me Using “Who Knows What About Me.doc” make a list of all the organisations that hold personal data about you and how this data was gathered.
In this lesson students are learning about: data protection and computer misuse legislation threats to personal data methods of keeping data secure
At the end of this lesson students will be able to: outline the requirements of the Data Protection Act (DPA) and how this legislation is intended to prevent misuse of personal data by organisations give examples of non-compliance with the DPA describe threats to personal data and methods for keeping data secure
The Data Protection Act (DPA) The DPA sets rules for organisations that want to keep and process personal data. Task: use the information provided on the BBC Bitesize site to find out more about the DPA. http://www.bbc.co.uk/schools/gcsebitesize/ict/legal/0dataprotectionactrev1.shtml
The Data Protection Act Specifies that personal data must be: fairly and lawfully obtained relevant for the stated purpose used only for the stated, lawful purpose(s) kept up-to-date and accurate kept for no longer than necessary kept secure
The data subject is entitled to: be supplied with a copy of the data held about them prevent processing likely to cause damage or distress prevent their data from being used for direct marketing compensation if they suffer damage as a result of any contravention of the Act have inaccurate data removed or corrected 'cooling off' period - you can cancel your purchase and get a full refund
Failing to comply Organisations are obliged to inform the ‘data subject’ of the purpose for which the data they are collecting will be used and to whom it will be disclosed. Revisit the privacy policies you found out about and summarised last lesson. Have these organisations complied with the law?
What happens if organisations don’t comply with the law? In pairs Look at “Failing To Comply.doc” Investigate one instance of failing to comply with the DPA and populate the relevant row of the table.
Threats to customer data and how to avoid them Work in pairs to identify possible threats to the customer data collected by an online retailer, using the table in Threats To Data.doc
The Computer Misuse Act Makes it illegal to gain unauthorised access to: a computer's software or data (hacking) - including the illegal copying of programs a computer's data with the intention of altering or deleting it – including planting viruses programs stored on a computer in order to copy them illegally (software piracy) 'cooling off' period - you can cancel your purchase and get a full refund
And finally… Homework task… Complete the “Exam practice.doc” worksheet