1. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills Computer Legislation

2. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills We will also consider the main pieces of legislation relating to computing: –Computer Misuse Act 1990 –Data Protection Act 1998 –Regulation of Investigatory Powers Act 2000 –Freedom of Information Act 2000 –Copyright and Patents

3. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills Computer Misuse Definitions of Computer Crime Edwards and Savage (IT and the Law)

4. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills Background Frequency of Computer Misuse The Offenders The Costs of Computer Crime

5. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills The Computer Misuse Act Types of Computer Crime 1Fraud 2Misuse of Resources 3 Sabotage, Arson & Vandalism 4 Blackmail

6. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills The Computer Misuse Act (cont) Objectives The Act itself –Offences –User Responsibilities –Enforcement

7. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills The Computer Misuse Act (cont) Provisions of the Act Three New Offences –1 The Unauthorised Access Offence –2 The Ulterior Intent Offence –3 The Unauthorised Modification Offence Comments on the Act

8. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills Data Protection Act 1998 The Act in Perspective Background The 8 Principles How the Act works Data Subjects Rights

9. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills Data Protection Act in Perspective Organisations InformationComputers Why we need legislation

10. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills Data Protection Act in Perspective Data Privacy PrivacyProtection Data Privacy

11. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills The Act What is it? Purposes of the Act Definitions used in the Act (Full details see DPC's guidelines): –1 Data –2 Personal Data –3 Data Subject –4 Data Controller –5 Data Processor –6 Processing –7 Relevant Filing System

12. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills The 8 Principles of the DPA There are eight principles to the data protection act - which should already be good practice – –1 Personal data shall be processed fairly and lawfully. –2 Personal data shall be obtained only for one or more specified and lawful purposes. –3 Personal data shall be adequate, relevant and not excessive.

13. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills The 8 Principles of the DPA There are eight principles to the data protection act - which should already be good practice – –4 Personal data shall be accurate and, where necessary, kept up to date –5 Personal data processed for any purpose…shall not be kept for longer than is necessary –6 Personal data shall be processed in accordance with the rights of data subjects under this Act

14. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills The 8 Principles of the DPA There are eight principles to the data protection act - which should already be good practice – –7 Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data. –8 Personal data shall not be transferred to a country or territory outside the EEA.

15. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills How the Act Works The Commissioner Data Protection Commissioner Data User Registration Data Users Obligations Enforcement and Appeals

16. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills How the Act Works Notification Notification information

17. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills How the Act Works Exemptions (5 main sections) There are a number of exemptions, the main ones being – –National security –Crime and taxation –Health, education and social work –Regulatory activity –Special purposes

18. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills How the Act Works Data Subject Rights –1 The right of access –2 The right to prevent processing –3 The right to compensation

19. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills –Regulation of Investigatory Powers Act 2000 –Freedom of Information Act 2000

20. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills Copyright Introduction Protection Getting a Copyright Length

21. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills Patents Introduction Protection Getting a Patent Length

22. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills Enforcing Patents and Copyright Introduction Federation Against Software Theft/ European Leisure Software Publishers Association Powers Law Suits

23. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills Summary Computer Misuse Background The Computer Misuse Act Copyright, Patents, etc Summary Further Reading

24. University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills Overview In this lecture we have discussed computer crime. We have also looked at and gives an overview of the main pieces of legislation relating to computing: Computer Misuse Act 1990 Data Protection Act 1998