Stretch tasks Legislation and Privacy

Round 1: Quiz Blitz

1. Data Protection Act 2018 It is the UK's version of GDPR.
2. Computer Misuse Act 1990 Unauthorised access to computer material.
3. Information that can identify a living person Names, addresses, locations and photos can all be personal data.
4. False It must be kept no longer than necessary.
5. authorised The same actions without permission are a crime.
6. Copyright protects software as a literary work Breaking the licence terms is copyright infringement.
7. True Open source means the source is open, not that it is free of charge.
8. The community, with no guarantee Proprietary software comes with vendor support.
9. Open source Open source licences permit use, modification and redistribution.
10. To see the data held about you; To have inaccurate data corrected You may also ask for data to be erased, and object to some uses.
11. Harmless pieces of data combining to identify someone Location, purchases and searches together pinpoint a person.
12. A service unusable without tracking gives no real choice Consent must be freely given, specific and informed.

Round 2: Quick Fire

1. • Proprietary: guaranteed support from the vendor
   • Open source: free of charge, installable anywhere, modifiable
   Model answer

   Proprietary software comes with a support contract, so the vendor is obliged to fix problems quickly, which matters for a critical system. Open source software is usually free of charge and can be installed on any number of machines and modified by the hospital's own staff.

2. • Harmless pieces of data are combined
   • Together they identify a person precisely
   Model answer

   Aggregation is when individually harmless pieces of data, such as where you are each morning and what you buy, are combined. Together they identify a person far more precisely than any one piece.

3. • Data must be kept no longer than necessary
   • Data must be accurate and up to date
   Model answer

   Personal data must be kept no longer than necessary, but closed accounts are kept for ten years. It must also be accurate and kept up to date, but records that are never checked will become inaccurate.

4. • The Copyright, Designs and Patents Act 1988
   • Copying and distributing protected work without permission is infringement
   Model answer

   It breaks the Copyright, Designs and Patents Act 1988, because the film is protected work, and copying and distributing it without the owner's permission is an infringement.

Round 3: Big Think

1. • Data must be processed lawfully, fairly and transparently
   • Consent must be freely given
   • Data should be used only for its specified purpose
   • Only what is necessary should be collected
   • The data must be kept secure
   • Users can see, correct, erase or object
   • Aggregation reveals a person's home, routine and health
   • Shared data cannot be recalled, and a conclusion
   Model answer

   Under the Data Protection Act, the app must process data lawfully, fairly and transparently, telling users exactly what it collects and who receives it. Consent must be freely given: if the app is unusable unless users agree to advertising, that is not a real choice. Data collected to track fitness should be used only for that specified purpose, so passing it to advertisers may be unrelated, and the app should collect only what is necessary. It must keep the data secure, and users have the right to see it, have it corrected or erased, and object to its use for advertising. The privacy risk is aggregation: location, heart rate and sleep patterns combined reveal where someone lives, their routine and their health. Once shared or leaked, that data cannot be recalled. Overall, sharing it with advertisers is only acceptable with genuine, informed consent.

2. • Open source is usually free of charge
   • It can be installed on any number of machines
   • Its source code can be modified
   • But support comes from the community, with no guarantee
   • Proprietary comes with vendor support, often by contract
   • But it costs licence fees and limits installations
   • Its source code is not provided, so it cannot be changed
   • A conclusion that commits
   Model answer

   Open source software is usually free of charge and can be installed on any number of machines, which saves a school a great deal, and its source code can be modified to suit. However, support comes from the community with no guarantee, so the school depends on its own technicians to fix problems. Proprietary software comes with support from the vendor, often under contract, but it costs licence fees, often per machine, and its source code is not provided, so it cannot be modified. On balance, open source suits a school with capable technical staff, while proprietary software is better where guaranteed support matters more than cost.

This or That

1. Computer Misuse Act Deleting files without authorisation is unauthorised modification of computer material.
2. Data Protection Act Personal data must be used only for its specified purpose, and processed transparently.
3. Copyright, Designs and Patents Act Distributing protected work without permission is infringement.
4. Yes Authorisation is what separates it from a Computer Misuse Act offence.
5. Open source Proprietary software is supplied without its source code.
6. Proprietary Open source support comes from the community, with no guarantee.
7. No: it is not freely given Consent must be freely given, specific and informed.
8. Through lawful everyday choices Data collected as a by-product of use is retained and combined.

Memory Match

• A 3 Personal data: Information that identifies a living person
• B 6 Consent: Permission freely given, specific and informed
• C 2 Aggregation: Harmless data combined to identify someone
• D 1 Computer Misuse Act 1990: Makes unauthorised access an offence
• E 4 Copyright Act 1988: Protects ownership of original work
• F 5 Open source: Code supplied, may be modified and shared

Sort It

1. Open source Source code provided That is what open source means.
2. Open source Anyone can contribute fixes Open development is often faster on fixes.
3. Proprietary May not be modified or redistributed The licence forbids it.
4. Open source Usually free of charge Usually, though not always.
5. Proprietary Source code not provided Proprietary software keeps its code closed.
6. Open source Install on as many machines as you like No installation limit.
7. Proprietary Developed by one company on its own schedule One company controls the development.
8. Proprietary Support from the vendor, often by contract The vendor is responsible for support.
9. Open source Support from the community, with no guarantee Nobody is contractually obliged to help.
10. Open source May be modified and redistributed The licence permits it.
11. Proprietary Usually paid for Proprietary licences usually cost money.
12. Proprietary A limited number of installations Proprietary licences usually restrict installs.