Computing and the law

The Data Protection Act 2018 (the UK's version of the GDPR) controls how organisations use personal data: data about an identifiable living person.

Personal data must be: used lawfully and fairly with a clear purpose; limited to what is needed; accurate; kept no longer than necessary; kept secure. The data subject can see their data (a subject access request) and have it corrected or deleted. The Information Commissioner's Office (ICO) enforces the law and can fine organisations.

The Computer Misuse Act 1990, as first passed, made three things offences (later changes added more, but these three are the ones to learn).

OCR names the Act; AQA and Edexcel ask about hacking and malware without naming it.

1. Unauthorised access to computer material (getting in without permission).
2. Unauthorised access with intent to commit or help a further crime.
3. Unauthorised modification of computer material (changing or deleting data, spreading malware).

The Copyright, Designs and Patents Act 1988 protects original work (code, music, images, text) as soon as it is made. Copying it without permission is illegal; software piracy is a breach. A patent protects a registered invention.

Licences: open source software publishes its source code, which anyone may study, change and share under the licence; usually free. Proprietary software keeps its code private and charges for use, but usually includes support and updates. Creative Commons licences let creators choose how their work may be reused.

These are summaries for exam revision, not legal advice.