Stretch tasks The four laws

Round 1: Quiz Blitz

1. The Data Protection Act 2018 Personal data must be kept secure. Sending it to the wrong person is a data protection breach.
2. Unauthorised modification Changing data without permission is unauthorised modification. Getting in at all was also unauthorised access.
3. Unauthorised access with intent to commit a further offence The break-in was the first step towards another crime, fraud, which makes it the more serious offence.
4. False FOI applies only to public bodies such as councils, schools and the NHS, not to private companies.
5. The Freedom of Information Act 2000 FOI is about transparency: the public can see information held by public bodies.
6. Data must be accurate and kept up to date; Data must not be kept longer than necessary; Data must be kept secure Data must also be used fairly, for a specified purpose, and only as much as is actually needed.
7. When the creator has given permission, such as with a Creative Commons licence Finding something online does not make it free to use. You need the creator's permission.
8. True The offence is the unauthorised access itself.
9. Unauthorised access → Unauthorised access with intent to commit a further offence → Unauthorised modification The maximum sentences are 2, 5 and 10 years. Damaging or changing data, or spreading malware, is treated most seriously.
10. 2018 The Data Protection Act 2018.
11. See the personal data an organisation holds about you It is free, and the organisation must normally respond within one month.
12. Data must not be kept longer than necessary Once the job has been filled, the company has no good reason to keep unsuccessful applicants' data for decades.

Round 2: Quick Fire

1. • The Data Protection Act controls how personal data is used
   • The Freedom of Information Act lets the public request information held by public bodies
   Model answer

   The Data Protection Act controls how organisations collect, store and use personal data about individuals. The Freedom of Information Act gives the public the right to request information held by public bodies such as councils and the NHS.

2. • (a) Unauthorised access
   • (b) Unauthorised modification
   Model answer

   (a) Unauthorised access to computer material. (b) Unauthorised modification, because a virus changes the computer's data.

3. • A licence where the creator gives permission in advance
   • So the work can be used legally, usually by crediting the creator
   Model answer

   Creative Commons is a licence where the creator gives permission in advance for their work to be used. It means you can use the image in your project legally, as long as you credit the creator.

4. • To see the data held about you
   • To have mistakes corrected
   • In many cases, to have it deleted
   Model answer

   The right to see the personal data an organisation holds about you, and the right to have any mistakes in it corrected.

Round 3: Big Think

1. • Only use the data for the purpose it was collected for
   • Only collect what it actually needs
   • Keep the data accurate and up to date
   • Keep it secure, especially the bank and medical details
   • Not keep it longer than necessary
   • Let members see and correct their data
   Model answer

   The gym must only use the data for the purpose it was collected for, running the membership, and only collect what it actually needs. It must keep the data accurate and up to date, and keep it secure, especially the bank details and medical conditions, for example by encrypting them. It must not keep the data longer than necessary, so it should delete it once someone has left, and members have the right to see their data and have mistakes corrected.

2. • It already is: unauthorised access under the Computer Misuse Act 1990
   • The access itself is the offence
   • The friend's privacy is invaded: their messages and personal information
   • No permission was given, which breaks trust
   • An account can be used to embarrass, bully or impersonate someone
   • Against: prosecuting a joke between friends could seem harsh
   • A clear rule protects everyone and stops it escalating
   • A reasoned conclusion
   Model answer

   Under the Computer Misuse Act 1990 it already is a crime, because unauthorised access is the offence in itself, whether or not anything is changed. There are good reasons for this. The friend's privacy is invaded, since their messages and personal information can be read, and no permission was given, which breaks trust. Even a joke can be used to embarrass or bully someone, or to impersonate them. On the other hand, prosecuting a prank between friends could seem harsh, and a criminal record would be out of proportion; a warning might be more sensible. However, a clear rule protects everyone, because people know exactly where the line is. Overall, I think it should stay a crime, with the police and courts deciding how seriously to treat each case.

This or That

1. Adequate and not excessive Organisations must collect only what they actually need. A gym has no need for blood types.
2. Used only for its specified purpose Data must be collected for a specified purpose and not used for something else.
3. An NHS hospital The Act covers public bodies such as councils, schools and the NHS, not private companies.
4. Unauthorised modification Deleting files or spreading a virus changes material without permission, which is unauthorised modification.
5. Yes, if you credit the creator With Creative Commons the creator gives permission in advance, usually on condition that you credit them.
6. Copyright, Designs and Patents Act Software is a creative work, so copying it without permission breaks copyright law.
7. Have the mistake corrected You can see the data held about you, have mistakes corrected and often have it deleted.
8. Kept secure Personal data must be kept secure, and an unlocked laptop in public is not.

Memory Match

• A 6 Data Protection Act 2018: Controls how organisations use personal data
• B 1 Computer Misuse Act 1990: Makes hacking and spreading viruses crimes
• C 4 Copyright Act 1988: Protects music, films, games and software from copying
• D 3 Freedom of Information Act: Lets the public request information from public bodies
• E 2 Creative Commons: Permission given in advance, usually with credit
• F 5 Personal data: Information that identifies a living person