4.1 - UK Legislation

Front

What is the purpose of the Data Protection Act (2018)?

Back

The Data Protection Act (2018) protects the data of individuals stored on computers and processed by organizations. It ensures data is collected lawfully, used for specified reasons, is accurate, not excessive, and stored securely.

Front

Who is a data subject and a data controller?

Back

A data subject is a person whose data is stored. A data controller is an employee responsible for registering with the Information Commissioner and ensuring data protection principles are followed.

Front

What are the six principles of the Data Protection Act (2018)?

Back

1. Data must be collected lawfully and processed fairly. 2. Used only for specified reasons. 3. Relevant and not excessive. 4. Accurate and up-to-date. 5. Not stored longer than necessary. 6. Stored and processed securely.

Front

What rights do data subjects have under the Data Protection Act?

Back

Data subjects have the right to access their information, request corrections, and make a Subject Access Request (SAR) to receive a copy of their data.

Front

What is the Computer Misuse Act (1990)?

Back

The Computer Misuse Act (1990) aims to prevent unauthorized access to data, use of data for illegal activities, and unauthorized modification of data.

Front

What is the Freedom of Information Act (2000)?

Back

This act allows individuals to request information from public authorities, which must respond within 20 days unless the request is too expensive or involves sensitive information.

Front

What is the Regulation of Investigatory Powers Act (2000)?

Back

RIPA allows monitoring and accessing online communication of suspected criminals, including accessing encrypted data and installing surveillance equipment.

Front

What is the Copyright, Designs & Patents Act (1988)?

Back

This act makes it illegal to copy work without permission from the creator or copyright holder, covering text, images, music, videos, or software.

Front

What is the Protection of Freedoms Act (2012)?

Back

This act protects personal data, regulates biometric data, CCTV use, and extends the Freedom of Information Act for wider requests.

Front

What are the Privacy and Electronic Communications Regulations (2003)?

Back

These regulations control how organizations communicate with individuals, requiring opt-in for contact and transparency about cookies and communication channels.