1. Data Protection

2. Who Knows What About Me
Using “Who Knows What About Me.doc” make a list of all the organisations that hold personal data about you and how this data was gathered.

3. In this lesson students are learning about:
data protection and computer misuse legislation
threats to personal data
methods of keeping data secure

4. At the end of this lesson students will be able to:
outline the requirements of the Data Protection Act (DPA) and how this legislation is intended to prevent misuse of personal data by organisations
give examples of non-compliance with the DPA
describe threats to personal data and methods for keeping data secure

5. The Data Protection Act (DPA)
The DPA sets rules for organisations that want to keep and process personal data.
Task: use the information provided on the BBC Bitesize site to find out more about the DPA.

6. The Data Protection Act
Specifies that personal data must be:
fairly and lawfully obtained
relevant for the stated purpose
used only for the stated, lawful purpose(s)
kept up-to-date and accurate
kept for no longer than necessary
kept secure

7. The data subject is entitled to:
be supplied with a copy of the data held about them
prevent processing likely to cause damage or distress
prevent their data from being used for direct marketing
compensation if they suffer damage as a result of any contravention of the Act
have inaccurate data removed or corrected
'cooling off' period - you can cancel your purchase and get a full refund

8. Failing to comply
Organisations are obliged to inform the ‘data subject’ of the purpose for which the data they are collecting will be used and to whom it will be disclosed.
Revisit the privacy policies you found out about and summarised last lesson. Have these organisations complied with the law?

9. What happens if organisations don’t comply with the law?
In pairs Look at “Failing To Comply.doc”
Investigate one instance of failing to comply with the DPA and populate the relevant row of the table.

10. Threats to customer data and how to avoid them
Work in pairs to identify possible threats to the customer data collected by an online retailer, using the table in Threats To Data.doc

11. The Computer Misuse Act
Makes it illegal to gain unauthorised access to:
a computer's software or data (hacking) - including the illegal copying of programs
a computer's data with the intention of altering or deleting it – including planting viruses
programs stored on a computer in order to copy them illegally (software piracy)
'cooling off' period - you can cancel your purchase and get a full refund

12. And finally…
Homework task…
Complete the “Exam practice.doc” worksheet